HTTPS authentication

Cpt. Zeep

On my current project i have requirement to do HTTPS user authentication.
'Till now i 've been doing authentication using sessions and checking login
and pass against MySql. Can you give me some info on authenticating users
via HTTPS, what are the requirements, can i use my existing scripts etc.
Many Thanx!

--
Relaxen und watch das blinkenlights.. .

Jul 17 '05 #1

Subscribe Reply

1996

Michael Vilain

In article <co**********@l s219.htnet.hr>,
"Cpt. Zeep" <ze**@nonesuch. com> wrote:

On my current project i have requirement to do HTTPS user authentication.
'Till now i 've been doing authentication using sessions and checking login
and pass against MySql. Can you give me some info on authenticating users
via HTTPS, what are the requirements, can i use my existing scripts etc.
Many Thanx!

Don't you have to buy a security certificate for the server you want to
authenticate against? Ain't cheap here in the States and it's a yearly
thing.

--
DeeDee, don't press that button! DeeDee! NO! Dee...

Jul 17 '05 #2

Gary L. Burnore

On Fri, 03 Dec 2004 08:35:07 -0800, "Michael Vilain
<vi****@spamcop .net>" wrote:

In article <co**********@l s219.htnet.hr>,
"Cpt. Zeep" <ze**@nonesuch. com> wrote:
On my current project i have requirement to do HTTPS user authentication.
'Till now i 've been doing authentication using sessions and checking login
and pass against MySql. Can you give me some info on authenticating users
via HTTPS, what are the requirements, can i use my existing scripts etc.
Many Thanx!

Don't you have to buy a security certificate for the server you want to
authenticate against? Ain't cheap here in the States and it's a yearly
thing.

No, it's not required. If you don't have a CERT, users will get a
popup first saying they don't have a cert. And no, not all CERTS are
expensive: http://www.freessl.com/starterssl/starterssl.html

1 year: $39US
2 years: $69US etc etc

--
gburnore@databa six dot com
---------------------------------------------------------------------------
How you look depends on where you go.
---------------------------------------------------------------------------
Gary L. Burnore | ÝÛ³ºÝ³Þ³ºÝ³³ÝÛº Ý³Þ³ºÝ³Ý³Þ³ºÝ³Ý ÝÛ³
| ÝÛ³ºÝ³Þ³ºÝ³³ÝÛº Ý³Þ³ºÝ³Ý³Þ³ºÝ³Ý ÝÛ³
DataBasix | ÝÛ³ºÝ³Þ³ºÝ³³ÝÛº Ý³Þ³ºÝ³Ý³Þ³ºÝ³Ý ÝÛ³
| ÝÛ³ 3 4 1 4 2 Ý³Þ³ 6 9 0 6 9 ÝÛ³
Black Helicopter Repair Svcs Division | Official Proof of Purchase
=============== =============== =============== =============== ===============
Want one? GET one! http://signup.databasix.com
=============== =============== =============== =============== ===============

Jul 17 '05 #3

Alvaro G Vicario

*** Michael Vilain <vi****@spamcop .net> wrote/escribió (Fri, 03 Dec 2004
08:35:07 -0800):

Don't you have to buy a security certificate for the server you want to
authenticate against? Ain't cheap here in the States and it's a yearly
thing.

openssl (a free tool) allows to generate as many keys and certs as you
need. You only have to pay for a certificate if you want a trusted third
party to certify you are who you claim to be.
--
-- Álvaro G. Vicario - Burgos, Spain
-- Thank you for not e-mailing me your questions
--

Jul 17 '05 #4

Similar topics

2625

HTTPS & PHP

by: Troot | last post by:

Hi all, In mind this is a daft question, but here goes. My hosts allow secure https logins on specific directories. What I want to do is have a login screen in flash, if the user enters the correct username and password I would like to set the HTTPS username and password using php/flash and then open the secure page. In my mind at this point they'll be logged in and then can navigate the

PHP

1720

How to HTTPS with authentication ANDextra URL properties??

by: A Fan | last post by:

The following PERL code snipet request (automated client request, OR, it can be JUST A PLAIN BROWSER REQUEST) needs to be converted to Java2-1.3: $urlreq="https://myname:mypaswd@www.farm.com/apps/animalsX?DOG=boxer&COLOR=brown" $ua->agent("Mozilla/3.0"); my $request = new HTTPS::Request('GET', $urlreq); $request->content_type('application/x-www-form-urlencoded'); .. .. (collect data and save it).

Java

5197

Deficiency in urllib/socket for https?

by: Gary Feldman | last post by:

I think I've found a deficiency in the design of urllib related to https. In order to complete an https connection, it appears that URLOpener and hence FancyURLOpener require the key and cert files. Or at least, it's not clear from the description of socket.ssl what it does if they're omitted. However, urlopen has no way to specify such things. Nor should it - for typical uses, a person simply trying to retrieve data from an ssl site...

Python

6189

SSL (HTTPS) with 2.4

by: Bloke | last post by:

Hi all. Some time ago (years) I had a script on Python 2.2 that would retieve a HTTPS web site. I used python22-win32-ssl.zip to handle the SSL aspect and it worked wonderfully. I am revisiting the project and need to update it to Python 2.4.1. python22-win32-ssl.zip isn't compatable (duh) and I can't find a newer version. I have had a search and can't find anything to point me in the right direction. Can someone please help?

Python

5216

Sessions across http/https

by: Grunff | last post by:

I'm experiencing an interesting problem with carrying a php session over from http to https. Much googling later, I'm still stuck. The application is an online shop, where some user data is stored in the session. As the user proceeds to checkout, we switch over to https. This is all done on the same physical server, under the same domain (which has an SSL cert). The session ID is carried over fine - I can read the session ID from http...

PHP

2528

Authentication, https and security.

by: Peter Chant | last post by:

I'm currently authenticating a site I have built using basic http authentication built into apache. This has zero overhead on php which is a bonus but it seems to not quite work how I'd like. Are the username and password in the login box that comes up encrypted? When I login https://mysite.local:portnum I get the login dialog. As I am using a self signed certificate I see the dialog stating warning me about it first before the login...

PHP

1858

HTTPS connections

by: Masahiro Ito | last post by:

I need to be login to several websites and download files that are https connections. I just tried IPWorks demo, but it does not seem to offer https. Does anyone know an https capable product, or a way I can do this myself? Thank you. Masahiro

Visual Basic .NET

7824

Https form post using Httpwebrequest brings back the same page.

by: nganapat | last post by:

I am trying to post form values to a https web page programmatically using Httpwebrequest but no matter what I do the same login page is returned instead of the next page. I would very much appreciate if someone could show me what is it that I am doing wrong. Below is the code that I am using. string viewstate = HttpUtility.UrlEncode(viewstatevalue); StringBuilder data = new StringBuilder(); data.Append("VAM_Group=");...

.NET Framework

8199

HttpWebRequest over Https Via Proxy Fails using NTLM

by: =?Utf-8?B?TGVuc3Rlcg==?= | last post by:

A C# (.NET 2) application which uses the System.Net.HttpWebRequest object to request a resource over HTTPS is failing following the installation of a new proxy server on our internal network with 407 Proxy Authentication Required. The same request through the old proxy succeeds. The same request to an HTTP address through the new proxy succeeds. Also, the request succeeds when forced to use Basic authentication but fails on NTLM.

ASP.NET

10039

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...

General

11359

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...

C / C++

10928

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...

Online Marketing

11069

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...

Windows Server

10543

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...

General

7259

Couldn’t get equations in html when convert word .docx file to html file in C#.

by: conductexam | last post by:

I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...

C# / C Sharp

5944

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...

Networking - Hardware / Configuration

4779

transfer the data from one system to another through ip address

by: 6302768590 | last post by:

Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

C# / C Sharp

3370

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General