SSL with passwords

Hi,
When using a secure connection is it recommended to encrypt passwords as well? Or is the secure connection enough?
Thanks

When using a secure connection is it recommended to encrypt passwords as
well? Or is the secure connection enough?I am not a lawyer, nor do I play one. I don't think anyone will give you a definitive "yes" answer because there are too many variables.
It depends on what you consider "secure enough". If your session is using a 40-bit export ciphersuite, then I would consider encrypting some of the session data.
It really depends on how important the data is, and how much would be lost if it's compromised/recovered. Are you comfortable passing the information with a particular grade of crypto or ciphersuite?
A current book on crypto might be able to help answer this question for you. FIPS 186-2 will show you what the US Government is allowing for some of its data.
Sorry, but I'm sure you can understand the position.
Good luck!

Similar Messages

Problem using SSL with JMX

Hi ,
I am trying to implement SSL with JMX. I took the example of Luis Miguel Alventosa to see how it works. I imported all the classes, password a access properties file. When I am able to start the MyApp server in the example. But when I am trying to run MyClient, it is giving me the following exception
Initialize the environment map
Create an RMI connector client and connect it to the RMI connector server
Exception in thread "main" java.rmi.ConnectIOException: Exception creating connection to: <IP>; nested exception is:
     java.net.SocketException: Default SSL context init failed: null
     at sun.rmi.transport.tcp.TCPEndpoint.newSocket(Unknown Source)
     at sun.rmi.transport.tcp.TCPChannel.createConnection(Unknown Source)
     at sun.rmi.transport.tcp.TCPChannel.newConnection(Unknown Source)
     at sun.rmi.server.UnicastRef.newCall(Unknown Source)
     at sun.rmi.registry.RegistryImpl_Stub.lookup(Unknown Source)
     at com.example.MyClient.main(MyClient.java:30)
Caused by: java.net.SocketException: Default SSL context init failed: null
     at javax.net.ssl.DefaultSSLSocketFactory.createSocket(Unknown Source)
     at javax.rmi.ssl.SslRMIClientSocketFactory.createSocket(Unknown Source)
     ... 6 moreHere is the MyApp code I used
package com.example;
import java.lang.management.*;
import java.rmi.registry.*;
import java.util.*;
import javax.management.*;
import javax.management.remote.*;
import javax.management.remote.rmi.*;
import javax.rmi.ssl.*;
public class MyApp {
    public static void main(String[] args) throws Exception {
        // Ensure cryptographically strong random number generator used
        // to choose the object number - see java.rmi.server.ObjID
        System.setProperty("java.rmi.server.randomIDs", "true");
        // Start a secure RMI registry on port 3000.
        System.out.println("Create a secure RMI registry on port 3000");
        SslRMIClientSocketFactory csf = new SslRMIClientSocketFactory();
        SslRMIServerSocketFactory ssf = new SslRMIServerSocketFactory(null, null, true);
        Registry registry = LocateRegistry.createRegistry(3000, csf, ssf);
        // Retrieve the PlatformMBeanServer.
        System.out.println("Get the platform's MBean server");
        MBeanServer mbs = ManagementFactory.getPlatformMBeanServer();
        // Environment map.
        System.out.println("Initialize the environment map");
        Map<String,Object> env = new HashMap<String,Object>();
        // Provide the password file used by the connector server to
        // perform user authentication. The password file is a properties
        // based text file specifying username/password pairs.
        env.put("jmx.remote.x.password.file", "password.properties");
        // Provide the access level file used by the connector server to
        // perform user authorization. The access level file is a properties
        // based text file specifying username/access level pairs where
        // access level is either "readonly" or "readwrite" access to the
        // MBeanServer operations.
        env.put("jmx.remote.x.access.file", "access.properties");
        // Create and start an RMI connector server.
        // As specified in the JMXServiceURL the RMIServer stub will be
        // registered in the RMI registry running in the local host on
        // port 3000 with the name "jmxrmi". This is the same name the
        // out-of-the-box management agent uses to register the RMIServer
        // stub too.
        // JMXServiceURL = "service:jmx:rmi:///jndi/rmi://:3000/jmxrmi"
        System.out.println("Create and start an RMI connector server");
        JMXServiceURL url = new JMXServiceURL("service:jmx:rmi://");
        RMIJRMPServerImpl server = new RMIJRMPServerImpl(3000, csf, ssf, env);
        RMIConnectorServer cs = new RMIConnectorServer(url, env, server, mbs);
        cs.start();
        registry.bind("jmxrmi", server);
        System.out.println("Waiting for incoming connections...");
}Here is the MyClient
package com.example;
import java.rmi.registry.*;
import java.util.*;
import javax.management.*;
import javax.management.remote.rmi.*;
import javax.rmi.ssl.SslRMIClientSocketFactory;
public class MyClient {
    public static void main(String[] args) throws Exception {
        // Environment map
        System.out.println("\nInitialize the environment map");
        Map<String,Object> env = new HashMap<String,Object>();
        // Provide the credentials required by the server to successfully
        // perform user authentication
        String[] credentials = new String[] { "username" , "password" };
        env.put("jmx.remote.credentials", credentials);
        // Create an RMI connector client and
        // connect it to the RMI connector server
        System.out.println("\nCreate an RMI connector client and " +
                "connect it to the RMI connector server");
        SslRMIClientSocketFactory csf = new SslRMIClientSocketFactory();
        Registry registry = LocateRegistry.getRegistry(null, 3000, csf);
        RMIServer stub = (RMIServer) registry.lookup("jmxrmi");
        RMIConnector jmxc = new RMIConnector(stub, env);
        jmxc.connect(env);
        // Get an MBeanServerConnection
        System.out.println("\nGet an MBeanServerConnection");
        MBeanServerConnection mbsc = jmxc.getMBeanServerConnection();
        // Get domains from MBeanServer
        System.out.println("\nDomains:");
        String domains[] = mbsc.getDomains();
        for (int i = 0; i < domains.length; i++) {
            System.out.println("\tDomain[" + i + "] = " + domains);
// Get MBean count
System.out.println("\nMBean count = " + mbsc.getMBeanCount());
// Close MBeanServer connection
System.out.println("\nClose the connection to the server");
jmxc.close();
System.out.println("\nBye! Bye!");
Here is the password.properties
monitorRole mrpasswd
controlRole crpasswdand access.properties
monitorRole readonly
controlRole readwriteI used the following jvm parameters to run the apps
-Djavax.net.ssl.keyStore=.keystore -Djavax.net.ssl.keyStorePassword=keypass -Djavax.net.ssl.trustStore=proxytruststore -Djavax.net.ssl.trustStorePassword=trustpassI really don't know where I am doing the mistake. Can anyone please give any idea ? For security I didnt disclosed the IP of my mechine in the error, insted I replace it with <IP>

Hi,
I assume you did create a keystore and trustore, right?
Could you verify that the paths to these files you give in your java options
are correct?
You could also try to activate debug traces - in particular security traces - see
at the end of this blog:
http://blogs.sun.com/jmxetc/entry/troubleshooting_connection_problems_in_jconsole
This may help you diagnose what is going wrong.
Hope this helps,
-- daniel
JMX, SNMP, Java, etc...
http://blogs.sun.com/jmxetc

Creating users in Microsoft Active Directory 2000/2003 with password.

Our BSP application is using LDAP_CREATE function module to create users in Microsoft AD 2000 and 2003. But the users are not created along with passwords. without passwords the users are created in disabled mode.
We tried using the SAP provided function modules under function group SLDAP to create the entries. We are able to create accounts on MSADS but only without the password. We find that MSADS requires the password to be passed/sent as a bytecode array (SAP equivalent Xstring/Rawstring ?) under the attribute unicodePwd, which we did using the fn. module LDAP_CREATE.
But the server returns an error code LDAPRC053 which translates to "Unable to execute operation on the server".
We generate the password string and convert the same into an xstring using SCMS_TEXT_TO_XSTRING function module.
We are not sure what we are missing, but the account does not get created with the password at all. Would appreciate if you can help.
We do have a backup solution of creating the users offline, but I want persue in above mentioned direction. Anybody has resolved this issue? Please let me know.
Thanks in advance.

I'm suspecting it has something to do with calling the function over an open connection versus a secure connection, SSL on port 636.
Any comments ?

Configuring SquirrelMail to use SSL with SMTP

I ran the conf.pl script to have SquirrelMail access my IMAP server via SSL, and everything works.
I then tried to use SSL with SMTP as well but when I used SquirrelMail to send mail, I got an error saying "Can't open SMTP stream". What is the correct setting to tell conf.pl to use?
I had secure SMTP enabled and chose CRAM-MD5 for the authentication method.
I actually have my web server and smtp server on the same machine, so this is more of a hypothetical question. In the end I turned off secure SMTP and set authentication back to none.
Ben

I don't have access to logs right now, but to answer your other question, SSL works fine when sending from Mail.
But with Mail, I supply the username and password; which user does SquirrelMail use to send?

How to create PDF from Excel with Password Protection Using Visual Studio & Visual Basic

Could someone provide some VB code sample(s) to create a PDF file with password protection (Security Method - Password Security - Restrict Editing & Printing)?
I create a bunch of reports every week using an Excel 2010 addin that subsequently must be printed to PDF. I then have to manually edit the properties of each document in order to apply the printing restriction.
I'm using Acrobat X.
I've downloaded the SDK but have no idea which dll's to use or where to begin.
Thanks!
Ross

That's surprising & disappointing. I would have thought that this capability would have long since been requested.
Thanks for the heads up.

Sftp batch job with password?

Hi folks.
We're trying to develop scripts to automate the transfer of files from various Windows machines to a Linux server. Because the job involves moving multiple files to multiple directories, I wanted to use sftp's -B batchfile option to transfer the files instead of having to reauthenticate every time we transfer files to a different location. However, the man page says:
Batch mode. Reads commands from a file instead of standard input. Since this mode is intended for scripts, SFTP2 will not try to interact with the user, which means that only passwordless authentication methods will work.
I would love to use keys to get this done but unfortunately, the type of authentication on the server is out of our control and not likely to change (it's straight password). So, is there any way I can do this in batch mode with password authentication? I thought about using scp but, as far as I can tell, it doesn't have great support for delivering multiple local files (in different locations) to multiple remote locations. One would have to re-authenticate for every scp command, right?
Any help would be appreciated. Thanks.

Thanks for the recommendation, Endperform, but after reading up on expect and autoexpect, I realized I'd rather not have usernames and passwords hard coded into the script.
After much research, I think I've found a solution. It's a little odd but the Maverick Ant library does exactly what I need it to do. It can actually read an ssh profile, perform multiple transfers without having to re-authenticate and execute multiple remote commands without having to reauthenticate. The native Ant libraries can't do this. There is no sftp Ant task and the scp and sshexec tasks are lacking to say the least.
If anyone else runs into a similar situation, I highly recommend the Maverick tool.

How Do I Connect An Airport Extreme With Password to another Wireless Devic

We have a setup for two different wireless devices so that there are multiple locations that can get online, but the entire setup has no passwords assigned. We would like to assign passwords to both wireless devices so that only the appropriate people are getting online. How does one do this?
The first wireless device that connects directly to the modem from the phone company is a brand new Apple Airport Extreme. The computer that set up the device so that people can get a signal was from a PC that is directly connected to the Airport Extreme via an ethernet cable. Also connected to the Airport Extreme is an ethernet cable that goes (50-100ft) to another wireless device - by Netgear - which then sends out another signal to pick up wireless internet, which is the signal/network that I work from.
If we assign a password to the Airport Extreme, I'm guessing it will complete screw up the connection to the Netgear. How would that be dealt with? And, how could we then, if we wanted, set up a password for the Netgear as well. I've read some initial information on the user guide CD and online, but I don't know the terminology of whether these are networks or just wireless devices 'bridged' together, etc.
My biggest concern, is it works right now, but the owner of the devices wants to put passwords on it and I want to make sure we can keep it working even with passwords. Does anyone know how to easily set up passwords and can I do it from my computer even though they were initially set up by a PC? Or do I have to do it from the PC and if so, how, because I am completely a Mac person and am very unfamiliar with Windows. Thanks.

Question that I need to know now is how do we set up a password on the Apple Airport Extreme now, when it is already set up and working without one?
Open AirPort Utility.
Select your base station, and then choose Manual Setup from the Base Station menu. Enter the base station password if necessary.
Click AirPort in the toolbar, and then click Wireless.
Choose a password scheme from the Wireless Security pop-up menu.
Enter the password all users will need in order to join this wireless network.
AirPort Utility 5.1 Help: Password-protecting your wireless network
Also, are there different types of passwords and if so, what is the most reliable one so that we don't lose connections, time out or have any other quirks?
There are different types of wireless encryption. WPA2 and WPA are the most secure especially when used with a non-dictionary password. 128 bit WEP is passable in most situations but not very strong. 40/64 bit WEP is extremely weak.
There is really no general "reliability" issue with any of them. Some devices aren't compatible with some of them.
If when we assign a password to the Apple Airport Extreme and for some reason the Netgear stops working, how do we unassign/take away the password on the Airport to get it back to the current setup that we know does work?
Follow the procedure above but disable wireless encryption instead of enabling it.

Is there a way to print a pdf, which is secured with password?

I want to know a way to print pdf which is secured with password to print without throwing a error ?
Instead it has to ask for a password and print..

we need to have an associated application installed in the system for that particular fileYup.
does javax.print api works for pdf files and word documents?Nope.
There is something called (I think) iText which can handle PDF documents. No idea whether it includes a printing facility or not.
db

Unable to connect to Wi-Fi with password

Hello,
I'm having a slight issue with an iPod and iPad. As the title says, I'm unable to connect to wi-fi with password encryption (WPA2). I don't understand why! I can connect to wi-fi when I take the password encryption off. I've been able to connect to wi-fi previously with password encryption enabled. I live in a complex with three other neighbors. I'd prefer to not leave the encryption off. Does anyone have an idea as to how to solve this problem? I've already tried restatarting the iPod and restarting the wireless router. I tried to forget the network as well on both devices and reconnect them, however, when I try to reconnect them it tells me "unable to connect to the network". I do not wish to do a factory reset for either devices. Also, I'm unsure whether this is related or not, but I just updated my software recently to OS 6.1.2 ...my problem began a day after doing so.
Any feedback would be much appreciated! Thanks in advance. 8]
I have a Netgear WNDR3400 wireless router.

- Reset network settings: Settings>General>Reset>Reset Network Settings
- iOS: Troubleshooting Wi-Fi networks and connections
- iOS: Recommended settings for Wi-Fi routers and access points
I would try another encryption but still use encryption. Also try changing the PW.
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.

Can't connect to WiFi-nets with password

I am not quite sure that this is the right place to post this question, but feel free to move it to where it belongs, any moderator:)
I have encountered a problem I didn't have earlier with my iBook trying to connect to WiFi-nets - it seems impossible to connect with passwords - only the net I have at home with Airport Express works, password included.
As soon as I find a net which doesn't require passwords, it all works.
I experienced this for the first time in February when I visited the newspaper I am working for, which is all Macintosh. They gave me the password to be able to log in to their wireless net, but I just received a message which reads something like An error occurred when attempting to log on to xxx net. Retry? OK. (Translated from Norwegian)
On the same trip, I could log on to public nets where you come to an opening page where you fill in username and pass, but when I visited my mother's where my brother has put up a wireless router, neither my mother's new iMac nor my iBook could connect and we received the same message and had to use Ethernet cables.
It seems to have gotten worse, since I the other day tried to connect to a public network here where I live and with which I have had no problems earlier, but now I receive that same error message.
I suspect that it may be caused by some minor bug in the latest update to Tiger, since another problem with Bluetooth, which went unresolved here, disappeared with that update. But instead, I have gotten this. Hopefully, my assumption is wrong and there is a solution out there:)
iMac G5 20", iBook 1,33 GHz Mac OS X (10.4.5) iSight
iMac G5 20", iBook 1,33 GHz Mac OS X (10.4.4) iSight
iMac G5 20", iBook 1,33 GHz Mac OS X (10.4.4) iSight

Nothing but perfect.
As for the log in page not appearing, I read in another topic here that sometimes it might help to try Firefox or IE instead of Safari as they might have coded it that way or something to that effect, but the problem is that Airport doesn't even connect to the net as it did earlier. The only thing which happens is that message.
In another forum, someone discovered that if the card is not firmly placed into the contacts, problems may occur, but since I have had no problems earlier and haven't touched the card and it was not installed by me, I very much doubt that it is the case here - and it works with open nets without passwords...

I can't open a PDF file with password with my iphone app

I can't open a PDF file with password with my iphone app, the app send me an error, but the password is correct. This only happend in the new version of iphone. In the latest version I didn't have this problems.

Can you please share the file with us at [email protected]? Also, can you please confirm that you are viewing the PDF in the Adobe Reader app rather than an app like dropbox, Mail or Safari?

Cannot login with password containing non-ascii characters

Hello,
I have web application, form based login. UTF-8 is specified "everywhere".
And it works, except for passwords.
If user register itself with password containing non-ascii characters, it is correctly written in database, but when doing either programmatic login or normal form based login, if fails.
If the password is only ascii, it works.
Username of login could be ascii or non-ascii, it doesn't matter, both works.
I'm using sun java application server 9.1.
jdbc realm.
I'm not using hashing passwords, just clean (now)
I tried configure realm Charset: UTF8 as last chance, but it doesn't work either.
The problem is only with non-ascii characters in password.
Any help very appreciated
Thanks a lot

hi,
I know all that, but that's not the case. My app uses preparedStatements, everything is properly configured, in all pages, utf-8 is going from user to db and back without any problems.
The only problem is with password field. As I am using form based login, with jdbc realm configured (again, nicely working when only ascii characters), I have very little chance to do something bad through the login phase.
I'm not talking about special characters, I'm talking about non-ascii characters, let's say - Chinese, arabish, Russian alphabet etc.
When user registers (my code), the fields are properly written to db. I have checked that, trust me.
But the Sun app server realm seems to have some problems with the password field.
(realm uses jdbc connection to mysql, the url contains all extra parameters to be sure about utf8. there is nothing more what can be configured...)
If I try other alphabet codes in login and ascii in password, it works. But soon, as I use other alphabet code also in password, it doesn't work anymore.
My only idea is, that I could try MD5 to create ascii only characters (I hope it works that way) on the client with javascript and then set Digest to MD5 in realm configuration. But still, it seems very strange. The clear way storage should also function? (now set Digest to 'none')
Is it a bug of Sun App Server?
thanks

Error when Connect to Access 2007 with password using OLEDB

Hi there,
I am seeing the below error when trying to Connect to Access 2007 with password using Crystal XI or Crystal 2008, when using the OLEDB to connection Access data.
Logon failed
Details: DAO Error Code: 0xd0f
Source: DAO.Workspace
Description: Unrecognised database format 'path to database\crs project database.aaadb
Get though when I use Access 2007 without password setup.
Many Thanks for any one can help.
Daphne Li

As a copy of this query has been posted to the CR design forum at 11:21, assuming this is indeed a design question.
Thus setting this thread as answered.
- Ludek

How to email a pdf file (attachment with password) using ABAP?

Hi Colleagues,
I
n abap, how do you email a pdf file that contains password?
(pdf with password, not the whole email).
A custom program is created. Inside this program, it
retrieves the spool number and converts it to a pdf file
(using function module '....abapspool...'). No parameter to put password.
I was able to do the above. The problem is how to put password on
the pdf file.
Once the user receives the email (say from hotmail or outlook) with pdf attachment, clicks on the pdf, it will as ask for an attachment.
sap version 4.7.
Questions:
- how to code in ABAP to include the pdf with password in an email
received from hotmail or outlook?
- any function modules or classes that can do the pdf password?
- do we need to install another technology or add-on application or
???? to do it? If yes, do we code in abap?
- any other ideas?
Thanks in advance.
Raymund

Hi Colleagues,
I
n abap, how do you email a pdf file that contains password?
(pdf with password, not the whole email).
A custom program is created. Inside this program, it
retrieves the spool number and converts it to a pdf file
(using function module '....abapspool...'). No parameter to put password.
I was able to do the above. The problem is how to put password on
the pdf file.
Once the user receives the email (say from hotmail or outlook) with pdf attachment, clicks on the pdf, it will as ask for an attachment.
sap version 4.7.
Questions:
- how to code in ABAP to include the pdf with password in an email
received from hotmail or outlook?
- any function modules or classes that can do the pdf password?
- do we need to install another technology or add-on application or
???? to do it? If yes, do we code in abap?
- any other ideas?
Thanks in advance.
Raymund

Any Problems using SSL with Safari and the move with Internet explorer to require only TLS encryption.

Any Problems using SSL with Safari and the move with Internet explorer to require only TLS encryption.

Hi .
Apple no longer supports Safari for Windows if that's what you are asking > Apple apparently kills Windows PC support in Safari 6.0
Microsoft has not written IE for Safari for many years.

SSL with passwords

Similar Messages

Maybe you are looking for