How to use SSL ?

Hi , friends,
I want to put secure login in my site with SSL.
so url should start with https://xxxxx
How to achieve that ?
and what will be the requirements ?
Sorry but i am new to this area..
Help me.
Ghanshyam

RahulSharna wrote:
SSL is no alien term it has nothing to do with being new to field.
You may be to configure you WEB/Application Server to enable SSL for your web applications.
Here are few helpful links of how to configure SSL over few popular WEB/Application servers
TOMCAT:*
http://tomcat.apache.org/tomcat-4.0-doc/ssl-howto.html*
http://tomcat.apache.org/tomcat-5.0-doc/ssl-howto.html*
http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html*
http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html*
JBOSS:*
http://docs.jboss.org/jbossas/jboss4guide/r1/html/index.html*
http://wiki.jboss.org/wiki/Wiki.jsp?page=SSLSetup*
http://www.i-proving.ca/space/Technologies/JBoss/Configuring+JBoss+SSL*
WEBLOGIC:*
http://edocs.bea.com/wls/docs81/secmanage/ssl.html*
http://www.digicert.com/ssl-certificate-installation-bea.htm*
http://e-docs.bea.com/wls/docs90/secmanage/ssl.html*======================
Hi Rahul,
Thanks for help.
But let me know little one thing.
"Do we need only have to configure at server side to enable SSL ?"
or some coding work is also there in jsp or ...
clarify.

Similar Messages

How to use SSL Technology in JSP.

Can anybody Tell me that How to use SSL Technology in JSP ?
I am using Apache Tomcat 5.0.28 Server.
How to configure the Tomcat server so that it will access any web application supported by Tomcat via SSL ?
Thank you very much in advance.

The JSP does not need to know that the request is coming over SSL. If the application must be over SSL, but the server also allows non-SSL communication, then, like I said, you need to build in a Filter that will check if the incoming request is an https or http request and redirect to the https url if the request was http. And you can do that using the method listed in the previous post. As far as setting up the SSL certificate for Tomcat to use, refer to the Tomcat Documentation that comes with the server. Other than those two things, you don't need to know anything else about SSL inorder to run an SSL application through a Tomcat server (or any other enterprise server either, for that matter), but do an internet search for SSL and maybe one or two other keywords that apply to your situation and you should find plenty that will help.

How to use SSL certificates in OSX Server

I have setup OSX server with a host name that is pointed properly to my OSX server. My question is about using certificates that were purchased through my domain registrar.
I bought a cert and after the validation process, I was given a link to download 4 certificate files.
AddTrustExternalCARoot.crt
DV_NetworkSolutionsDVServerCA2.crt
DV_USERTrustRSACertificationAuthority.crt
[domain name].crt
So after downloading these and opening them one by one, I installed them in the keychain as a system cert.
The part I cant figure out is how to use the domain cert instead of the one that the server creates upon completion of setup (the self signed one).
On the certificate selection in the sidebar, I can choose Import a certificate identity, but when I drag my domain cert into the box, it shows up as a non-identity cert and the Import button is still grayed out. I dragged all four certs there and all of them show as non-identity certs.
If I go down the path of the Get a Trusted Certificate, it takes me through the CSR request which I dont think I need since i have my certificates already.
Am I missing a step? Or do I need to export from the keychain, then import into the server application? Seems like the new certificates should show up in the server application. Any help would be greatly appreciated.

I got the answer and wanted to post for anyone that happened to have this question.
During the SSL cert setup, it asks where your domain is hosted and since it was hosted by Network Solutions, I chose that option which doesnt do the CSR request. I had to choose Other/VPS.
Once I did that, I was able to generate a CSR in the server application and get my certificate issued again by pasting the request code on my registrars website. Once I received those certs, I dragged my domain cert into the Pending one listed in the certificate list.
Also I chose Apache/ModSSL as the type of server. Hope that helps and new people like myself in setting up the server application.

How to use ssl on j2ee

I'm Ecuadorian student and developer. Excuse me by my bad English.
I don`t know how to use https in my web application, I'm developing a e-commerce and I need to use https.
please I need help.
thanks.

Quote:
it's automatically done. just send your request via
"https://" instead of "http://". if you switch on the
console you will see that Java internally uses the
SSL classes.
How to send the request via "https://" when we use JSC. Are there any direct ways to do this using JSC?
Thank you very much.

Mailman: How to use SSL SMTP server?

It turns out that AOL rejects email sent to any of the email lists I have set up on my Snow Leopard Server system, because they require all sending hosts to have a fully qualified domain name.
My ISP, Verizon, requires SMTP communications to be encrypted via SSL and on Port 465. How do I tell Mailman to use the appropriate parameters?
I have learned that one modifies a configuration file at /usr/share/mailman/Mailman/mm_cfg.py . Will restarting the Mailman process by doing a "/usr/share/mailman/bin/mailmanctl restart" make the changed configuration effective?

For starters, consider using UTL_MAIL instead as it's easier than using the UTL_SMTP stuff...
http://download.oracle.com/docs/cd/B19306_01/appdev.102/b14258/u_mail.htm

How to configure Oracle 10g Advanced Security to use SSL concurrently with

How to configure Oracle 10g Advanced Security to use SSL concurrently with database User names and passwords
In Oracle Advanced Security Documentation it is mentioned that i can use SSL concurrently with DB user names and passwords. But when i configure the client certificate on the client my DB connection is getting authenticated using the certificate, which out passing user id or password.
We want to connect to Oracle DB over SSL channel so that the data packets are not in clear text. Also we want the user to make a connection using user id and password.
Basically we want SSL with out authentication.
Need your expert advice

Read the documentation (I have given following links assuming you are running a 32 bit architecture)
Server installations:
http://www.oracle.com/pls/db102/to_toc?pathname=install.102%2Fb14316%2Ftoc.htm&remark=portal+%28Books%29
Client installations:
http://www.oracle.com/pls/db102/to_toc?pathname=install.102%2Fb14312%2Ftoc.htm&remark=portal+%28Books%29
You can find the required books (if not using 32 bit architecture) from
http://www.oracle.com/pls/db102/portal.portal_db?selected=3

How to use a key file in the FTP Task using and SSL connection

In the past I have used this code to set the FTP pass word in an FTP component task in SSIS.
Does anyone know how to use a Key file in an SSL connection to download a file from an FTP site? If not can you tell me where I can get the C# code examples to learn how to create a script task or if there is another way in SSIS to download large files
from an SSL FTP site? Thank you for any help offered.
public void Main()
ConnectionManager FTPConn;
FTPConn = Dts.Connections["FTPServer"];
FTPConn.Properties["ServerPassword"].SetValue(FTPConn, Dts.Variables["FTPPassword"].Value);
Dts.TaskResult = (int)ScriptResults.Success;
Antonio

You can use SFTP for this.
This is a way of implementing SFTP in SSIS using standard tasks
http://visakhm.blogspot.in/2012/12/implementing-dynamic-secure-ftp-process.html
also see
http://blog.goanywheremft.com/2011/10/20/sftp-ftps-secure-ftp-transfers/
Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

How can I use SSL in httpunit??

How can I use SSL in httpunit? I am using HTTPUNIT 1.5.4 and the
j2sdk1.4.1_04?
I want to activate a submit button that following an https-Url in the
html action method...
The SSL certificateis from Server,
i want to connect, is comming from Thawte. then it should be automatically
trusted by the "trust file" within the JVM (FAQ) but it does not. Can me
someone explain what to do?
Here is the throwing Exception:
java.net.SocketException: Network is unreachable: connect
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)
at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158)
at java.net.Socket.connect(Socket.java:434)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.<init>(DashoA6275)
at
com.sun.net.ssl.internal.ssl.SSLSocketFactoryImpl.createSocket(DashoA6275)
at sun.net.www.protocol.https.HttpsClient.doConnect(DashoA6275)
at sun.net.www.http.HttpClient.openServer(HttpClient.java:386)
at sun.net.www.http.HttpClient.openServer(HttpClient.java:602)
at sun.net.www.protocol.https.HttpsClient.<init>(DashoA6275)
at sun.net.www.protocol.https.HttpsClient.a(DashoA6275)
at sun.net.www.protocol.https.HttpsClient.a(DashoA6275)
at sun.net.www.protocol.https.HttpsClient.a(DashoA6275)
at
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.plainConnect(DashoA6275)
at
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(DashoA6275)
at
sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:528)
at
com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnectionOldImpl.getOutputStream(DashoA6275)
at
com.meterware.httpunit.MessageBodyWebRequest.completeRequest(MessageBodyWebRequest.java:96)
at
com.meterware.httpunit.WebConversation.newResponse(WebConversation.java:60)
at com.meterware.httpunit.WebWindow.getResource(WebWindow.java:162)
at com.meterware.httpunit.WebWindow.getSubframeResponse(WebWindow.java:125)
at com.meterware.httpunit.WebWindow.getResponse(WebWindow.java:118)
at com.meterware.httpunit.WebWindow.sendRequest(WebWindow.java:107)
at
com.meterware.httpunit.WebRequestSource.submitRequest(WebRequestSource.java:245)
at
com.meterware.httpunit.WebRequestSource.submitRequest(WebRequestSource.java:224)
at com.meterware.httpunit.WebForm.doFormSubmit(WebForm.java:75)
at com.meterware.httpunit.WebForm.submit(WebForm.java:67)
best regards,
Frank

Umm...not to be (too) rude - but did you try reading the error message?
"java.net.SocketException: Network is unreachable: connect"
You haven't gotten to the "is my certificate acceptable" part yet, because you aren't even getting off of your box.
Grant

How to use SquirrelMail and Require SSL for IMAP Service?

Hello,
Mac OS X Server v.10.4.9 – Open Directory Master
Providing POP, IMAP, SMTP, web services including webmail via SquirrelMail.
PHP v.4.4.4 Nov. 1, 2006
OpenSSL v.0.9.7l Sept. 2006
I need to require SSL for IMAP access, however, I also need to provide webmail access. SquirrelMail does support TSL it seems and that can be configured from /etc/squirrelmail/config/conf.pl and is discussed briefly here: http://www.squirrelmail.org/wiki/SquirrelMailIMAPS .
When I turn on TSL on SquirrelMail and change the IMAP port number to 993 attempting to log into SquirrelMail provides the following error:
Bad request: IMAP server does not appear to support the authentication method selected. Please contact your system administrator.
According to the above noted page from the SquirrelMail site one needs PHP 4.3 and SSLv3 in order for TSL to work, one must also connect to the IMAP server over port 993. Requirements I appear to meet.
So – how can one require the use of SSL for IMAP and still provide webmail access via SquirrelMail?
I have reviewed these three threads:
http://discussions.apple.com/thread.jspa?threadID=912841&tstart=75
http://discussions.apple.com/thread.jspa?messageID=1457773&#1457773
http://discussions.apple.com/thread.jspa?messageID=3921004&#3921004
However they do not answer the fundamental question of how to use SquirrelMail with SSL required by IMAP. Essentially the conversation revolves around working around the SSL requirement or forgoing it.
Thank you for any assistance.

David,
Yet from time to time these same users are in a
circumstance where they need to use webmail, thus
SquirrelMail needs to work. I am not trying to
secure webmail by requiring SSL.
I see, your problem. In this particular case there is a workaround.
Use different ports for postfix and cyrus limited to localhost, thus catering only to SquirrelMail, thus not needing TLS.
Roughly do this (this is just off the top of my head, may contain errors):
For SMTP / Postfix:
Edit /etc/postfix/master.cf
and add:
465 inet n - n - - smtpd
-o smtpdrecipientrestrictions= permit_mynetworks,reject
-o mynetworks=127.0.0.1/32
-o smtpdenforcetls=no
# This will create a port 465 (if you use this alreay pick another one. choose the number wisely, depending ony what is in use on your server)
# This port is only accessible to IP number in "mynetworks"
For IMAP / Cyrus
Edit /etc/cyrus.conf and add (below imap):
imaplocal cmd="imapd -C /etc/imapd-local.conf" listen="127.0.0.1:imap" prefork=0
Next duplicate /etc/imapd.conf and name it imapd-local.conf
Edit /etc/imapd-local.conf
Change
tlsserveroptions: require
to
tlsserveroptions: use
Next edit:
/etc/services
and create a port called "imaplocal"
(you could probably recycle 585 wich is deprecated, check what is in the services file, make sure no duplicate port numbers).
should look something like:
imaplocal 585/udp
imaplocal 585/tcp
When done with all config files:
Save & restart mail services
Point SquirrelMail to the new ports wich should only be accessible to localhost (check with an external client if it holds
Sorry for the "draft style" post, but I don't have much time.
Just ask, if anything isn't clear.
HTH,
Alex

How to enable SSL in order to access web appln. deployed in CE using https?

Hi,
I am new to Netweaver and this forum. Not sure if I am posting my question in right forum category. Please let me know otherwise.
Question -
I would like to know how to enable SSL in order to access the deployed web application in Netweaver environment using https instead of http.
System Info:
Netweaver 7.1
Database: SAP DB (KERNEL 7.7.04 BUILD 021-123-186-883)
OS: Linux (amd64) 2.6.18-194.el5
Note: I have general idea about how to enable SSL in a non-SAP application server like tomcat using valid certificate (like enabling SSL in tomcat and adding certificate to server & Java keystore). But since I am new to Netweaver, not sure how to enable the same in Netweaver environment.
Any help would be much appreciated.
Thanks
Edited by: Gopi.j on Oct 15, 2010 8:04 PM

hi
check the following sap help.
http://help.sap.com/saphelp_nwce71core/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm
Best regards,
John

How to Implement SSL with Oracle Applications R12 without using Load Balanc

How to Implement SSL with Oracle Applications R12.1.3 without using Load Balancer

Please refer to (Enabling SSL in Release 12 [ID 376700.1]).
Thanks,
Hussein

Norton Internet Security cannot scan emails the use SSL. How do I insure that I do not get a virus or malware by opening an email in Thunderbird?

Norton Internet Security cannot scan emails the use SSL. How do I insure that I do not get a virus or malware by opening an email in Thunderbird? I have read that you don't have to click on a link to get malware but that some email can trigger malware just by opening and reading. Any suggestions to keep my emails from triggering malware? AOL Desktop software has it's own built-in email scanner but I'm trying to get away from using their software and rely just on TB.
Thanks

There are many aspects to this question.
First, using SSL or TLS to send and receive email is important because it prevents others from sniffing your email login. Particularly if you are using a device over wi-fi or on untrusted networks, this is critical because if others obtain your email login, bad things can happen.
Of course, using SSL or TLS with your mail server also protects the content of your email from being captured by others, so that's good too.
Second, you are correct that there can be security threats in email other than the attachments, although the attachments generally are the most dangerous. Your antivirus should protect you from bad attachments because in order to open them, they need to be written to disk in a temporary folder, and your AV software leaps into action whenever a new file is added to disk. You also can hedge your bets by using a two-step approach: first save the attachment to disk and only after it survives the real-time AV scan then launch it in the appropriate application.
Sometimes content in the message body can trigger a vulnerability in your email software or a plugin. As these vulnerabilities become known, Mozilla updates its software, but there seem to always be new issues discovered and there will never be perfect security. I'm not sure how helpful email scanning is for this problem.

How to Protect mod_plsql DAD with SSO using SSL

Hi,
I am not able to set up any DAD with SSO using SSL. I have processed all issues depending on the Note:273379.1 "How to Protect mod_plsql DAD with SSO".
When I am not using ssl, my DAD with SSO will work properly.
But when I am using ssl, my DAD (http://host_name/pls/testsso) will redirect any page to SSO login through http (not through https).
Any ideas?
AS 10.1.2.0.2

Did you run ossoreg.jar to update your osso.conf with the SSL entry for SSO ?

How to get SAP to use SSL for Content repository?

I have defined a content repository in OAC0. I would like SAP and the end user to use SSL when talking to the repository. I have obtained a certificate for the repository, so that I can manually trference the repository via https... but in OAC0 when I press the Test Connection button I get "Connection Error:No SSLsupport available". Do I have to import the content repository certificate into STRUST or something?

Hi Ken,
please have a look at the SAP note [712330|https://service.sap.com/sap/support/notes/712330].
Best regards,
Klaus

How do I reconnect using SSL/TLS security in Dreamweaver using Windows 7?

I am using an old version of Dreamweaver on Windows 7. When I try to upload a file, I get a message saying that I need to reconnect using SSL/TLS security mechanisms. Is this a setting in Dreamweaver or Windows 7? Thanks for any help or suggestions.

It sounds like it is a requirement of the server, not Dreamweaver or Windows7
Dreamweaver, even older versions, can connect using both FTP and SFTP. But SSL/TLS are on the HTTP protocol, not FTP, so I don't understand why you would get such an error using DW file upload.

How to use SSL ?

Similar Messages

Maybe you are looking for