I created a self-signed certificate for testing in IIS7 (win 7 64 bit environment ). I attached the cert to the bindings, etc and everything was fine. But when I crank up the site I get the generic error: There is a problem with this website's security certificate. Continue to this website (not recommended). What should I be looking at to fix this
View 5 Replies
I am using a Self signed certificate for HTTPS. I have it ready. what should be changed in IIS and also what should be changed in the code for https to come into affect. I need https for some pages(not all).
View 2 RepliesThis is in VS 2005. And IIS is 6.0. I am trying to use Self signed certificate for HTTPS. In the code i am redirecting from http to https for few pages. It is nt working fine. and in the IIS manager, for each page that i want HTTPs, i have changed its setting by checking "Require Secure Channel(SSL)" and "Require 128 bit encryption".
public void setSecureProtocol()
{
string redirectUrl = null;
bool bSecure = true;
bool SecureConnection = true;
if (bSecure && SecureConnection)
redirectUrl = Request.Url.ToString().Replace("http:", "https:");
else
if (!bSecure && SecureConnection)
redirectUrl = Request.Url.ToString().Replace("https:", "http:");
if (redirectUrl != null)
Response.Redirect(redirectUrl);
}
Pages throw me an error like this The page must be viewed over a secure channel The page you are trying to access is secured with Secure Sockets
Layer (SSL).
Please try the following:
* Type https:// at the beginning of the address you are attempting to reach and press ENTER.
HTTP Error 403.4 - Forbidden: SSL is required to view this resource. Internet Information Services (IIS)Internet Information Services (IIS) When i try to put https in the start of the URl, it wont call. I have no idea whats wrong in here. Here, Its not redirecting from http to https. For the pages that i am not redirecting in the code behind, and changing in the IIS, i can see the HTTPS when i check the two checkboxes. Internet Information Services (IIS)
We have two different users and we want to authenticate them through "IIS Client Certificate Mapping Authentication" in IIS 7. They have certificates issued by VeriSign.When user requests a website, a pop-up appears on their browser to select a certificate. User can see both certificates and selects one of them and hit ok.We could capture Certificate attributes using
following code
HttpClientCertificate cs = Request.ClientCertificate;
Response.Write("ClientCertificate Settings:<br>");
Response.Write("Certificate = " + cs.Certificate + "<br>");
until now every thig is fine.We mapped one of two certificates to an AD user using this
"Configuring One-to-One Client Certificate Mappings".http://learn.iis.net/page.aspx/478/configuring-one-to-one-client-certificate-mappings/I am trying to print if user is authenticated or not using following code. and it is never authenticated. I don't know what mapping does. It seems it does nothing.Response.Write (Request.ServerVariables["LOGON_USER"]) ;
Response.Write ("<BR>") ;
Response.Write ("AUTH_USER: ") ;;
Response.Write(Request.ServerVariables["AUTH_USER"]);
Response.Write ("<BR>") ;
Response.Write("IsAuthenticated :" + User.Identity.IsAuthenticated + "<br>");
Response.Write("HttpContext.Current.User.Identity :" + HttpContext.Current.User.Identity.IsAuthenticated + "<br>");
Response.Write("Request.IsAuthenticated :" + Request.IsAuthenticated + "<br>");
Can somebody help so that I can allow user only if he supplies a certificate that is mapped to a user. Currently any user having a certificate can get into the site, site is having anonymous authentication and certificate is required.
I have been struggling for days trying to get a simple ActiveX DLL to work with no success despite studying several articles on the subject which I have found online. I suspect I have several things coded incorrectly as I am just not familiar with this and most of the articles on the subject are out of date. I am using Visual Studio 2008 and have been using the Windows SDK V7.1 for digital signing.
What I am trying to do is return the client machineName from the environment class back to the web page (and eventually back to the web server). This is my C# class:
using System;
using System.Reflection;
using System.Runtime.InteropServices; [code]...
Note that I copied my dll to my Windows SDK folder, signed that, copied it back to my cab file which I then copied over to my SDK file, signed the cab file. Then finally, copied the cab file to my website project.
NOTE: See comments at end of first answer. I have purchased a signed certificate from Comodo and with that installed, I now get "Unknown Publisher" error even though the certificate status is "ok", Both the dll and cab file have been signed.I believe my issue now is the control needs to be marked as safe for scripting, http://www.olavaukan.com/2010/08/creating-an-activex-control-in-net-using-c/
I have created a self signed certificate for IIS6 for my app. App works fine when I access it from the web server. But when I access the app from client machine it gives an error "The connection has timed out" on IE, and on Firefox it does not load the page.
View 4 RepliesHow to send a digitally signed through C# code.i apply the no of ways but still not able to perform.
View 6 RepliesI am using the aspnet membership features and check to make sure the user is logged in before display the page:
Protected
Sub Page_Load(ByVal sender
As
Object,
ByVal e
As System.EventArgs)
Handles
Me
.Load
'Check for UserName
If Context.User.Identity.Name
Is
Nothing
Or IsDBNull(Context.User.Identity.Name)
Or Context.User.Identity.Name =
String.Empty
Then
Response.Redirect(
"~/Login.aspx"
)
End
If
Session(
"UserName"
) = Context.User.Identity.Name
UserName.Text = Session(
"UserName"
)
UserIDValue.Text = Membership.GetUser().ProviderUserKey.ToString()
End
Sub
Everything was working fine when I had two separate applications (two web.config files) using the same data base and the same "applicationName" in the web.config files...............
There is something I don't understand, When I don't put certificate at all, the SSL connection is established successfully, I wonder how the server decrypt the message without client certificate.What is client side certificate is for
View 4 RepliesI there a way to get the user id that they signed on to the computer with from web site project, without changing IIS so they will have to login? This will be interanet and remote internate users.
View 3 RepliesI have searched and could not find any article related to "How to implement Certificate Security in
production environment".
I could able to Create sample certificates for client and Server on my local machine and was able to authenticate my client app with the certificates . These certificates are test certificates.
How do I do this in Production. We have a domain certificate from GoDaddy which resides on the server. How do I create a Client Certificate off of that.
My virtualpath provider works well in VS 2010 but doesn't in IIS 7.5 on my localhost. In IIS, I get a HTTP 404 when I fetch an aspx, which is normal because the aspx is in a table. The problem seems linked to the sequence
HostingEnvironment.RegisterVirtualPathProvider(new MyProviderClass) in the AppInitialize method.
There is no exception raised but the instruction seems to no avail :
If I try object O = HostingEnvironment.VirtualPathProvider immediately after the registering, I see that O==null.
Again, it works perfectly well in VS.
I have an issue with an aspx page I have created but I decided to break it down into its smallest component and then see what I was missing.
If I create a new webform called default.aspx and add the code posted below it doesn't load all of the css when accessing the page remotely in IE11
(I use IIS7)
it works fine in google as
http://localhost:8080/default.aspx
or
http://servername:8080/default.aspx
but in IE11 it only works as
http://localhost:8080/default.aspx
anything else causes the fault in the attached image.
Code:
<%@ Page Language="VB" AutoEventWireup="false" CodeFile="Default.aspx.vb" Inherits="_Default" %>
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
<head runat="server">
<title>testing</title>
[Code] .....
I'm am experiencing some strange behavior with a website. I have a page that performs a simple AJAX request to fill a div. The data is fetched from a page in the same domain. When I perform the request using [URL]. The requests work perfectly, but when using [URL] or [URL]. My requests are simply ignored. I've used Firebug to track requests, and not even a single ajax request is performed. Normal requests (such as fetching the main page that invokes the ajax code) works fine on both scenarios.
View 2 RepliesI previously crate website in framework 2.0 before one year and there is working good on server. But Currently I download same site on my local machine and configure again in Visual Studio 2008 with framework 2.0 compiler then do new changes on site and it running good on localhost.But the same code I upload on server again They can't work code properly.In new code I changes some XML file that retrieve data and save data, but I add new code in this XML file so it can't work with new code but previous code is working as good as previous.
View 3 RepliesIf I'm taking a password on a page, should that page be served via https and exactly how dangerous is it not to? I've tried googling this but every guide just says that ssl certificates "stop hackers seeing sensative data" with no real description of how they would do this or exactly how vulnerable your site is as a result of not having ssl.Could someone summarize how easy it is for someone to steal passwords on non-https pages? Should i even be considering doing a login page without one?
View 4 RepliesI have both the wcf and asp.net project together in the same project. (I'm running on Azure, so this is more convenient).I have this set in the web.config:
<system.serviceModel>
<serviceHostingEnvironment aspNetCompatibilityEnabled="true" />
</system.serviceModel>
y wcf service is decorated with:
[code]...
I'm using ASP.net 2.0. I want to set a calendar control's selected date to 30 day before today. My code is like this:
theCalendar.SelectedDate = DateTime.Now.Today.AddDays(-30);
but It does not work.
I have such markup:
div id="wrapper"
nested table
text here
here
and here
the same thing here
here
and here
I'm managing a rather large project, written in asp.net webforms + mvc3, with a large user base, and a pretty high daily visitor count. Basically, there are a lot of requests at any given moment.
One of my controllers in MVC that handles / resizes images on the fly has the following attribute applied to it:
[SessionState(SessionStateBehavior.Disabled)]
Now, if an action in the controller tries to access the session - it obviously throws an exception - so we're good so far. The problem is: if I go to the IIS Worker Processes window (Win Server 2008 R2, IIS 7.5), and check the current requests for this site, I can sometimes see the requests to an action in this controller. Their current state is locked in State: RequestAcquireState, Module Name: Session. Sometimes these locks go over a second or two in this state.
Wasn't the whole point of the attribute in the first place to make the requests to the controller ignore the state, and not waste time (and possibly being locked) trying to acquire the state? If this is so - am I doing something wrong here, or does the problem lie elsewhere?
In my website I wrote that code:
protected void Page_Load(object sender, EventArgs e){ LinkButton lbtnTopicAddress = new LinkButton(); lbtnTopicAddress.Click += lbtnSpecificTopic1_Click;}
protected void lbtnSpecificTopic1_Click(object sender, EventArgs e){ Server.Transfer("~/SpecificTopic.aspx)"
}
But when I press on the link in run time, the caller doesn't go to the EventHandler method.Why?
Note,
I wrote code like that in many pages in the same website but it work only in one page.
i am still new to using session state, i want to convert page name into and integer according to a database table a function then compares "X" and "Y" to check if a user have the right to view this page i know this is not the best way of managing website security, but it is like "training on how to use the session" what have i done wrong
Partial Class advancedsearch
Inherits System.Web.UI.Page
Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
Try
Label1.Text = Session("username").ToString
Label3.Text = Session("role").ToString
Label4.Text = System.IO.Path.GetFileName(Request.Url.ToString())
Catch ex As Exception
Response.Redirect("login.aspx")
End Try
If Label1.Text = "" Then
Response.Redirect("login.aspx")
End If
Dim x As Integer = Int32.Parse(Label3.Text)
Dim y As Integer = Int32.Parse(DropDownList1.SelectedItem.ToString)
If x < y Then Response.Redirect("login.aspx")
End Sub
Protected Sub Button1_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles Button1.Click
Response.Redirect("default.aspx")
End Sub
End Class
I need to know abt Microsoft Certificate Services ...can u guys xplain in details ....I find microsoft article regarding this ....Stil cnt able to do ..Am a new bee in this kind of stuff ....
View 2 RepliesI need to add a cert. for the NetworkService account as this is what Identity of my App pool is set to, but I'm not sure how to go about doing that. Here's the steps, I take: Bring up the run command and submit "mmc"When the Management console appears I click on File > Add/Remove snap-in.Select Certificates and click AddSelect Service Account, click Next twice Then I'm presented with a bunch of Service Accounts. The ones that kind of resemble what I'm looking for are: Network Access Protection AgentNetwork ConnectionsNetwork List ServiceNetwork Location AwarenessNetwork Store Interface Service Out of the choices above, Network List Service would be my best guess.
View 1 RepliesI want to get the certificate information of a website. I means that i've a textbox on a page. When i enter a url in that textbox and press the button. The certificate information of that website should be returned.
Say, i've entered the [URL], Then it should return the Certificate authority, Validation period etc.
