I have the following test service:    Opening it in any browser gives this warning   "There is a problem with this website’s security certificate"  However, I can ignore the warning and view the web service description.  Accessing same from code throws this exception:   Message=System.Web.Services.Protocols.SoapException: Server was unable to process request. ---&gt; System.ServiceModel.Security.SecurityNegotiationException: Could not establish trust relationship for the SSL/TLS secure channel with authority '197.253.5.218'. ---&gt; System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---&gt; System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.   Please is there an option to bypass such faulty security certificate from code?  Thanks.
122702
We are setting up a new SharePoint for which we don't have a valid SSL certificate yet. I would like to call the Lists web service on it to retrieve some meta data about the setup. However, when I try to do this, I get the exception:     The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.   The nested exception contains the error message:     The remote certificate is invalid according to the validation procedure.   This is correct since we are using a temporary certificate.  My question is: how can I tell the .Net web service client (SoapHttpClientProtocol) to ignore these errors?
59364
We have a busy website where we never used SSL. Recently its indexed by Google as https://www.example.com.  The users are getting security certificate errors.   In google webmaster tools we can only remove the relative URL. For example, any thing after http://www.example.com.   I am using IIS 6.0 to host the site .net website.   I have seen similar posts here and there and almost all of them recommend a redirect. I don't want to set up a redirect as it will slow down the site loading. I guess I would also need to setup a new website on IIS  with HTTPS protocol and then do the redirect to HTTP site?
7743
I have developed an application in C# that makes use of the Salesforce API via a WSDL and need to ensure that the upcoming disabling of SSL3.0 will not affect functionality. I have never had to do any specification of the security protocol when using the webservice, so I am not sure what to do.  How do I:   Determine what protocol is currently being used in my implementation. Set it to use TLS (if necessary)
74200
I am trying to authorize another sandbox/production to create connection. When I first time authorize the connected app, it is returning the Auhorization Code in the URL, however when it gets redirected to LWC app, code is disappeared because the parameter is 'code' not like 'c__code'. So, pagereference state is unable to read the param value. It was working till the previous release, with Spring release it started behaving differently.  Original URL: not working    I tested with adding 'c__' to the param manually and it worked fine.  Modified URL: Working    is there a way we can rename the redirected URL params dynamically?  'code' to 'c__code'
99219
I am trying to install SSL on my nginx reverse proxy with certified ssl keys but i get this message when i try to restart server:  Restarting nginx: [emerg]: SSL_CTX_use_PrivateKey_file("/etc/nginx/conf.d/cert.key") failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib) configuration file /etc/nginx/nginx.conf test failed   everyfiles are root:root with 600 permissions i've tested the certificats and they are validated with this website:   there are no trailing weird caracters in my keys, and has 64 caracter per line  here is my config file  server {     listen   443;     server_name     my.domain.com;     ssl on;     ssl_certificate      conf.d/cert.pem;     ssl_certificate_key  conf.d/cert.key;      location / {          proxy_pass         http://upstream1;          proxy_redirect     off;          proxy_buffering    off;          proxy_set_header        Host            $host;          proxy_set_header        X-Real-IP       $remote_addr;          proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;     }   }  Any ideas? Thank you
107648
Is it possible for a web server to select an SSL certificate to use based on the host-header of the incoming connection, or is that information that is only available after the SSL connection is established?  That is, can my webserver listed on port 443 and use the foo.com certificate if  is requested, and the bar.com certificate if  is requested or am I trying to do something impossible because the server has to establish an SSL connection before it knows what the client wants?
58297
UPDATE: Since Area 51 is not supporting SSL yet. But the Area 51 link in the footer of Meta Stack Exchange site and in the Your Communities dropdown list contains https://, clicked from there it caused the insecure connection issue.   Actual post When I click the  link in the bottom of the , I received the insecure connection issue.  In Google Chrome:  In plain text:  Your connection is not private Attackers might be trying to steal your information from discuss.area51.stackexchange.com (for example, passwords, messages or credit cards). NET::ERR_CERT_COMMON_NAME_INVALID  In Mozilla Firefox:  In plain text:  Your connection is not secure The owner of discuss.area51.stackexchange.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.
19504
Many browsers and Internet companies have recently claimed that SSL Certificates with a signature algorithm of SHA1 will imminently no longer be considered secure.  Most notably, .  Yet I've read that since the SSL/TLS negotiation and Cipher Suite don't make use of plain SHA1 (or even MD5), and instead use SHA1 within an ; that using a Cipher Suite with SHA1 is still an acceptable security practice.  Is this the case?    While we're on it, is it also the case of using MD5 in a cipher suite?
71383
When connecting to a URL via HTTPS and the SSL certificate doesn't match (such as at a paid Wi-Fi hotspot), iOS shows a dialog asking whether the certificate should be accepted. If you accept the certificate, iOS adds an SSL exception and will never ask about that certificate again.  There are possibly two aspects to this: certificates accepted in Safari, and certificates accepted for network services in other apps.  The question is, how does one remove these exceptions, short of a full device reset? There seems to be no way to view or remove exceptions in the device settings.
77080
This may sound repititve question. But the error incurs after following multiple links found like:  and .  The controller:  public with sharing class SFLoginCtrlr {     public static HTTPResponse getResp(String loginCred){         Map&lt;String, Object&gt; mapLoginCred = (Map&lt;String, Object&gt;)JSON.deserializeUnTyped(loginCred);         String username = ''+mapLoginCred.get('username');         String password = ''+mapLoginCred.get('password');         HttpRequest req = new HttpRequest();         req.setMethod('POST');            req.setTimeout(60000);         req.setEndpoint('https://www.salesforce.com/services/Soap/u/29.0');         req.setHeader('Content-Type', 'text/xml;charset=UTF-8');                 req.setHeader('SOAPAction', '""');         req.setBody('&lt;Envelope xmlns="http://schemas.xmlsoap.org/soap/envelope/"&gt;&lt;Header/&gt;&lt;Body&gt;&lt;login xmlns="urn:partner.soap.sforce.com"&gt;&lt;username&gt;' +username+ '&lt;/username&gt;&lt;password&gt;' + password + '&lt;/password&gt;&lt;/login&gt;&lt;/Body&gt;&lt;/Envelope&gt;');                 HttpResponse res = new Http().send(req);         return res;     } }   The mock class:  @isTest global class ExampleCalloutMock implements HttpCalloutMock{   global HttpResponse respond(HTTPRequest req){     HttpResponse res = new HttpResponse();     res.setStatus('OK');     res.setStatusCode(200);     res.setBody('SUCCESS');     return res;   } }   The test class:  @isTest private class SFLoginCtrlrTest{     static testMethod void SFLoginCtrlrTestMethod(){         Test.startTest();          Test.setMock(HttpCalloutMock.class, new ExampleCalloutMock());          Map&lt;String, String&gt; logincred = new Map&lt;String, String&gt;();         logincred.put('username', 'dummy@user.com');         logincred.put('password', 'notapassword');          SFLoginCtrlr.getResp(JSON.serialize(logincred));          Test.stopTest();     } }   The error received while running test class:     Methods defined as TestMethod do not support Web service callouts   Not sure, where is the issue...
103160
The problem is that the main site uses the HTTPS protocol, and the GeoServer does not accept requests over the protocol , gives an error message &lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt;&lt;ows:ExceptionReport xmlns:xs=&quot;http://www.w3.org/2001/XMLSchema&quot; xmlns:ows=&quot;http://www.opengis.net/ows&quot; xmlns:xsi=&quot;http://www.w3.org/2001/XMLSchema-instance&quot; version=&quot;1.0.0&quot; xsi:schemaLocation=&quot;http://www.opengis.net/ows http://test.geoportal.samgau.com/geoserver/schemas/ows/1.0.0/owsExceptionReport.xsd&quot;&gt; &lt;ows:Exception exceptionCode=&quot;InvalidParameterValue&quot; locator=&quot;typeName&quot;&gt;     &lt;ows:ExceptionText&gt;Could not locate {https://test.geoportal.samgau.com}001_1132201_ads_lin in catalog.&lt;/ows:ExceptionText&gt; &lt;/ows:Exception&gt;&lt;/ows:ExceptionReport&gt;....  If I change the protocol to HTTP, then everything is ok GeoServer message: 2020-09-22 18:24:06,311 ERROR [geoserver.ows] - org.geoserver.wfs.WFSException: Could not locate {https://test.geoportal.samgau.com}001_1132201_ads_lin in catalog. I can't figure out which direction to look in. There is very little information on the Internet about this. What should I do and how should I organize the work?
123352
I used to operate a website with an SSL certificate, but have stopped using the SSL certificate. The problem is that most of the external links to the website use the https:// prefix.  I have tried the https:// to http:// redirect in the .htaccess file:  RewriteEngine On  RewriteCond %{HTTPS} on RewriteRule ^(.*)$ http://%{HTTP_HOST}%{REQUEST_URI}   But it seems, as has been pointed out elsewhere, that the server is trying to retrieve the certificate before activating the redirect. Hence, an error is shown before the redirect is ever accomplished. The error is either a warning that the certificate is expired, or if I delete the certificate signing request, then an error that SSL received a record that exceeded the maximum permissible length.  Is there any way to allow the incoming links to be redirected properly?
33107
I'm writing a program that reads content from a user provided URL. My problem is in the code that goes something like this: Uri uri = new Uri(url); WebRequest webRequest = WebRequest.Create(uri); WebResponse webResponse = webRequest.GetResponse(); ReadFrom(webResponse.GetResponseStream());  And this is breaking if the provided url is an https:// URL. Can anyone help me with changing this code so that it will work with SSL encrypted content. Thanks.
87963
Visiting  displays an HTTPS certificate error in Google Chrome and Internet Explorer 10.  For reference, meta.&lt;sitename&gt;.stackexchange.com is the old URL for per-site metas. Child metas were migrated to &lt;sitename&gt;.meta.stackexchange.com during the implementation of . The old URLs were configured to silently redirect users to the correct page.  This issue has technically been reported a few times before, (, , , , ). However, these reports were made before HTTPS support for child metas was officially completed in .
80483
After Windows Update, I get this error when trying to connect to a server using Remote Desktop Connection. When read  provided by error message, it seems because of an update at 2018/05/08:  May 8, 2018 An update to change the default setting from Vulnerable to Mitigated. Related Microsoft Knowledge Base numbers are listed in CVE-2018-0886.  Is there a solution for this?
33524
Is there a possibility of using REST Assured library for testing SOAP webservices? I have a bunch of Test Suites in SOAP UI and I need to check if there is possibility of using REST Assured. Can anyone suggest if this is possible? Many thanks for any comments.
26473
I want to create self signed certificate for the website. The old certificate expired few days ago. There are more than one NameVirtualHosts hosted on systems. The commands I am using to create certificate are taken from one tutorial website and are:  openssl genrsa -des3 -out server.key 1024 openssl req -new -key server.key -out server.csr  cp server.key server.key.org openssl rsa -in server.key.org -out server.key openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt   After this in ssl.conf file I have specified under VirtualHost section along with old settings done by other admin  SSLEngine on SSLCertificateFile &lt;full_path&gt;/server.crt SSLCertificateKeyFile &lt;full_path&gt;/server.key   On starting the server I am getting following messages in log file and server fails to start.  In error_log file messages are   [Mon Jun 01 23:52:46 2009] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)   In ssl_error_log file messages are   [Mon Jun 01 23:52:46 2009] [error] Init: Private key not found  [Mon Jun 01 23:52:46 2009] [error] SSL Library Error: 218710120 error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag  [Mon Jun 01 23:52:46 2009] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag  [Mon Jun 01 23:52:46 2009] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error  [Mon Jun 01 23:52:46 2009] [error] SSL Library Error: 218734605 error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib   I would really appreciate if some one can explain how to solve this. I have tried a few other tutorial website on self signed SSL certificates but none of the steps they mention are working.