On heroku, is there absolutely no way to redirect an https naked domain on heroku to it’s non naked domain with wwws?

The best idea we have found so far is to setup two Amazon EC2 micro machine instances with a small bit of nginx configuration. Then, provision two elastic IP addresses to point to those EC2 instances and point 2 A records to those IP addresses. This way, if something goes wrong on the hardware, you … Read more

show entire certificate chain for a local certificate file

For local certificates you can see the subject and direct issuer using: openssl x509 -noout -subject -issuer -in test.crt subject= /C=US/ST=Utah/L=SLC/O=My Organization/CN=my.server.com issuer= /C=BE/O=GlobalSign nv-sa/CN=GlobalSign Organization Validation CA – SHA256 – G2 But that doesn’t indicate if the certificate includes any intermediate certificates or the full chain of trust. The verify command you listed will … Read more

What exactly is the git:// protocol?

The git protocol is a special daemon that comes packaged with Git; it listens on a dedicated port (9418) that provides a service similar to the SSH protocol, but with absolutely no authentication. It was introduced at the very beginning of Git, in commit 2386d65 (July 2005, Git 0.99.1) Add first cut at “git protocol” … Read more

Unable to load certificates when trying to generate pfx file

I get the error: unable to load certificates myserver.crt needs to be in PEM format. Does it have —– BEGIN CERTIFICATE —– and —– END CERTIFICATE —–? myserver.crt should actually be a chain of certificates (and not just the one server certificate). The chain should include all intermediate certificates needed by the client to verify … Read more

Which TLS version was negotiated?

You can use Reflection to get to the TlsStream->SslState->SslProtocol property value. This information can be extracted from the Stream returned by both HttpWebRequest.GetRequestStream() and HttpWebRequest.GetResponseStream(). The ExtractSslProtocol() also handles the compressed GzipStream or DeflateStream that are returned when the WebRequest AutomaticDecompression is activated. The validation will occur in the ServerCertificateValidationCallback, which is called when the … Read more

Import certificate as PrivateKeyEntry

You try to add certificate and expect that it will be private key – its confusion between two different things. Generally, when you create keystore (.jks) it include the private key inside. If its empty (deleted) you should generate bundle (.p12 file) from your key and certificates. In order to create new free key and … Read more

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)