In reply to Thomas’s answer: For each site, an SSL certificate has a direct cost. We have a dev, qa, and prod environment and thus that is three certificates that are needed for each site Hardly true. You don’t need to have every single dev and qa behind SSL with valid, current certificates. You — … Read more
If I understood well, Apple now wants the developers to use HTTPS and TLS 1.2 for network calls. Temporary, you can add this in your “Info.plist” file : <key>NSAppTransportSecurity</key> <dict> <key>NSAllowsArbitraryLoads</key> <true/> </dict> Just have a look to this link, it may also help you : http://ste.vn/2015/06/10/configuring-app-transport-security-ios-9-osx-10-11/ — Update : Following some comments the above … Read more
There’s no need to monkeypatch ActionController/ActionDispatch, and force_ssl has side effects (e.g. when behind an ELB). The most straightforward way to achieve secure cookies is to modify config/initializers/session_store.rb: MyApp::Application.config.session_store( :cookie_store, key: ‘_my_app_session’, secure: Rails.env.production? )
In Android SDK Manager select Tools -> Options then check the box “Force https://… sources to be fetched using http://…”
Remove the key pass phrase: openssl rsa -in key.pem -out newkey.pem If the certificate and the key are together: openssl rsa -in mycert.pem -out newcert.pem openssl x509 -in mycert.pem >>newcert.pem Source: http://www.madboa.com/geek/openssl/#key-removepass
Looking at how google analytics add their script to the page: ga.src = (‘https:’ == document.location.protocol ? ‘https://ssl’ : ‘http://www’) + ‘.google-analytics.com/ga.js’; Then document.location.protocol would seem safe for all browsers.
Restarting the browser will help and ask you again. Looking forward to see better solutions.
httpbin.org has public endpoints for HTTP Basic and Digest Authentication (in each example, replace :user and :passwd with the test values you’d like to check against – :qop, too, for Digest): /basic-auth/:user/:passwd Challenges HTTPBasic Auth. /hidden-basic-auth/:user/:passwd 404’d BasicAuth. /digest-auth/:qop/:user/:passwd Challenges HTTP Digest Auth. Each endpoint is available in both HTTP and HTTPS.
Finally banging head on desk for two days I found this setting in chrome://flags/ to Allow invalid certificates for resources loaded from localhost. finally no disable all certificate error, only for localhost. Adding answer for someone struggling with same issue.