tls1.2

How to add TLS 1.2 in cfhttp tag in ColdFusion 10

拥有回忆 提交于 2019-11-28 09:42:39
问题 I am using ColdFusion 10. How can I specify my connection is TLS 1.1, TLS 1.0, etc. Can I use the cfhttp tag? How to add TLS 1.2 in cfhttp tag using ColdFusion? 回答1: ColdFusion 10 will handle the TLS 1.2 protocol using CFHTTP without any issues as long as you are running Coldfusion on Java 1.8.0_nn. You need to upgrade your Java version. Also see this article I wrote on which SSL/TLS protocols are usable for each ColdFusion/Java version combinations. https://www.trunkful.com/index.cfm/2014/12

WinHTTP.WinHTTPRequest.5.1 does not work with PayPal sandbox after TLS 1.2

爱⌒轻易说出口 提交于 2019-11-28 08:50:47
PayPal sandbox just recently restricted to TLS 1.2 connection. This makes our site stop working with PayPal sandbox although it stills work with the production PayPal. In the future the production PayPal will have the same restriction. We're using classic ASP and Microsoft WinHTTP.WinHTTPRequest.5.1 component for communication with PayPal. Here's the code below. objHttp.StatusText returns "Bad Request". We're on Windows Server 2008 R2. I tried to use MSXML2.ServerXMLHTTP.6.0 instead, but it only works on my Windows 8.1 development machine, not on our Windows Server 2008 R2. Although MSXML2

node.js mqtt client using TLS

青春壹個敷衍的年華 提交于 2019-11-28 08:40:36
问题 I am trying to implement a node.js mqtt client with TLS using the package below; https://www.npmjs.com/package/mqtt#client The code for running mqtt client without TLS is as follows; var mqtt = require('mqtt') var client = mqtt.connect('mqtt://test.mosquitto.org') client.on('connect', function () { client.subscribe('presence') client.publish('presence', 'Hello mqtt') }) client.on('message', function (topic, message) { // message is Buffer console.log(message.toString()) client.end() }) How

How to test which version of TLS my .Net client is using

泄露秘密 提交于 2019-11-28 06:12:55
I support a .NET site which (amongst many, MANY, other things) talks to remote APIs from supplier systems. We want to upgrade to support TLS 1.2 We're hoping to do so as per this question: Are there .NET implementation of TLS 1.2? But how do I check that this is actually working once I've made the change. Ideally one of my supplier sites would start using TLS 1.2 ONLY and then my test could just be "can we talk to that supplier now?" But we don't have that. I'm guessing I can do something with a packet sniffer of some sort, but I wouldn't know what I was looking for exactly, nor how to set up

Can Google App Engine Java support TLS>1.0

懵懂的女人 提交于 2019-11-28 06:00:29
问题 We have a Java app on Google App Engine. We use Google's custom domains and SSL support. A recent security audit has found two issues that we need to resolve relating to the SSL configuration: 1) The server-side SSL/TLS endpoint is configured to allow weak SSL/TLS cipher suites. Specifically: block ciphers having block size of 112 bits - DES, 3DES and Cipher suites that use block ciphers (e.g. AES, 3DES) in CBC mode. 2) The server-side SSL/TLS endpoint is configured to allow connections using

Chrome “Active content with certificate errors”

坚强是说给别人听的谎言 提交于 2019-11-28 05:13:44
We recently updated our ZNC server (don't think this matters) with a new certificate to include a Subject Alternative Name (SAN) DNS field. It works now in incognito but my existing session shows the error "This page is not secure (broken HTTPS)." with the below details: Active content with certificate errors You have recently allowed content loaded with certificate errors (such as scripts or iframes) to run on this site. I am searched but am not finding anything related to more detail on this. It sounds like it will just expire on its own since it states "recently" but I am more concerned

TLS 1.2 + Java 1.6 + BouncyCastle

旧巷老猫 提交于 2019-11-28 01:33:36
For supporting HTTPS connections through a Java 1.6 API to remote hosts using TLS 1.2, we have developed a customized TLS SocketConnection factory based on Bouncy Castle Libraries (v. 1.53) It's very easy to use, just: String httpsURL = xxxxxxxxxx URL myurl = new URL(httpsURL); HttpsURLConnection con = (HttpsURLConnection )myurl.openConnection(); con.setSSLSocketFactory(new TSLSocketConnectionFactory()); InputStream ins = con.getInputStream(); During testing, I connect different web and remote hosts exposed into SSLabs Tests 90% of the time this works fine! But there are some cases in which we

When was TLS 1.2 support added to OpenSSL?

混江龙づ霸主 提交于 2019-11-28 00:45:16
Does OpenSSL 0.9.8x support TLS1.2? I looked at the changelog for OpenSSL but didn't find any information on this: https://www.openssl.org/news/changelog.html Martin On the official changelog page you provided , under Changes between 1.0.0h and 1.0.1 [14 Mar 2012] you can see Initial TLS v1.2 support . *) Add TLS v1.2 server support for client authentication. [Steve Henson] *) Add TLS v1.2 client side support for client authentication. Keep cache of handshake records longer as we don't know the hash algorithm to use until after the certificate request message is received. [Steve Henson] *)

Setup AsyncHttpClient to use HTTPS

寵の児 提交于 2019-11-27 19:56:26
I am using com.loopj.android:android-async-http:1.4.9 for my request to server. It was working fine until I SSL/TLS is required in my server. So I need to modify my AsyncHTTPClient to use HTTPS in all URLs. I checked this similar how to make HTTPS calls using AsyncHttpClient? but did not provide clear solution to the problem. The accepted solution was not secure as well because of this warning from the library itself: Warning! This omits SSL certificate validation on every device, use with caution. So I went on and check other solutions. I ended up following the recommendation from: https:/

Is that possible to send HttpWebRequest using TLS1.2 on .NET 4.0 framework

Deadly 提交于 2019-11-27 13:53:16
My application connects to Experian server and Experian will soon stop supporting TLS 1.0 and TLS 1.1. All connectivity using HTTPS must use TLS Version 1.2. I want to do some research on that issue and see sending HttpWebRequest using TLS 1.2 on .NET 4.0 framework works If it does not, I will probably need to create a webservice on .NET 4.5 and call its methods, if it does, I do not have to anything. Has anyone already faced with that issue? Crowcoder Yes, it supports it but you must explicitly set the TLS version on the ServicePointManager . Just have this code run anytime (in same app