all groups > dotnet security > november 2006
Filter by week: 1 2 3 4 5
Encrypt Email with Certificate Natively in .Net
Posted by josh NO[at]SPAM youinspire.me.uk at 11/29/2006 9:34:06 AM
I wrote the following code using the ASPEncrypt .Net Component:
Dim objMail As IMailSender = New MailSender
Dim strEmailAddress As String
objMail.Username = "xxx"
objMail.Password = "xxx"
objMail.Host = "xxx"
objMail.Subject = subject
... more >>
.NET Applications in Linux
Posted by sen at 11/28/2006 10:03:00 PM
Want to explore on .NET applications development and deployment in Linux for
the applications currently developed and deployed in Windows XP env. Please
advice regarding the setup to up done, compatiblity,..... more >>
Using Caspol to change Security Policy - Code Groups # different on different PC ???
Posted by Joe at 11/28/2006 5:23:49 PM
Hi
On my pc I use Caspol -ag 1.4 Fulltrust - to change intranet setting
On another pc I need to use Caspol -cg 1.2 Fulltrust - to change intranet
setting
Is this possible???
I want to write a utility to set Intranet to Fulltrust but how can I
determine what the intranet is
1.2 or 1.4 ... more >>
Assembly Throws Network Exception...
Posted by David++ at 11/28/2006 7:08:02 AM
Hi folks,
Having some trouble running a .NET 2.0 assembly from a Network Share.
Assembly is on Windows Server 2003, SP1
Have installed .NET 2.0 dotnetfx
Have attempted to add full trust to the network via -
Caspol.exe -cg 1.2 FullTrust
Does not work..
Also tried -
CasPol.exe ... more >>
Code signing - recommended cerificate provider?
Posted by John Blight at 11/27/2006 1:34:01 AM
We're looking to sign not just executable files, but also Microsoft Visio
template (VST and VTX) and stencil (VSS) files, and possibly drawing files
(VSD and VDX), that contain VBA code. Such files may be in Visio 2002, 2003
and 2007 format.
Does anyone have any recommendations for a certif... more >>
Encrypt data
Posted by crino at 11/24/2006 2:18:34 AM
Hi,
i'm trying to encrypt data with a publickey exctracted from certificate
file but i got error!?
this is my code:
using Microsoft.Web.Services3.Security.X509;
using System.Security.Cryptography.X509Certificates;
using System.Security.Cryptography;
//exctract the key
X509Certificate... more >>
Running an assembly from a shared folder on the network
Posted by João Costa at 11/23/2006 1:07:01 AM
Hello all,
I have an application that runs fine locally, however when I place it on a
network share it issues an exception, however this does not happen on the
machine the application was developed on.
I fully trusted the assembly and It worked, however the share folder sould be
trusted ... more >>
Create X509 certificate in memory *without* makecert
Posted by e.loman NO[at]SPAM gmail.com at 11/22/2006 11:59:14 PM
Hi,
Is it possible to create an X509Certificate in memory without
pre-creating a certificate file using makecert?
The thing is, I want to create a X509 certificate, with a public key
and other data that is submitted by a client user, and sign that
certificate.
Is this possible?
Kind r... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Unauthorised exception using WebBrowser control
Posted by Matt Adamson at 11/22/2006 2:49:48 PM
Guys,
Not sure on the best forum for this.
We are getting an unauthorised exception when using the web browser control
as you can see from the call stack below
TestCase
'Tranmit.Sprinter.WebApp.Testing.Purchasing.Invoicing.Edit.EditInvoiceTest.EditInvoice_3'
failed: System.Unauthorized... more >>
Code Access Security for Windows Service
Posted by awburns NO[at]SPAM gmail.com at 11/22/2006 8:59:13 AM
Okay, this might well be a newbie question. Sorry about the cross-post
from General, but I realised this was where I should have posted.
I've written a Windows service based upon the ServiceBase class. The
service, and all the classes it uses are in one assembly,
myservice.exe. I don't expect ... more >>
Howto encrypt configuration sections using Enterprise Library ?
Posted by dragoncino NO[at]SPAM yahoo.it at 11/21/2006 5:29:44 AM
Hello to everybody,
I need to encrypt the dataConfiguration or connectionStrings section of
the app.config file (using Enterprise Libary January 2006).
On some sources on internet (e.g.:
http://msdn.microsoft.com/msdnmag/issues/05/07/DataPoints/) I have
found that there is the possibility to en... more >>
Assembly Minimum Security Requirements
Posted by Giovanni at 11/20/2006 1:23:01 PM
Hi,
Using VS 2005 Pro., I have built a Class Library (DLL) with several
functions, subs, etc... I would like to determine the minimum security
requirements. For some reason, the "Security" tab does NOT appear when
designing Class Libraries (DLL's), therefore, I cannot use the "Calcul... more >>
X509Certificate2.Verify fails
Posted by Tomasz Grobelny at 11/20/2006 12:00:00 AM
I have two X509 certificates: one issued by CA on my local network (mmc
certificates snap-in->Personal->All tasks->Request new certificate...)
and the second one generated by makecert (I have Root Agency certificate
in my trusted CA certificate store, the certificate appears to be
trusted accord... more >>
The remote server returned an error: (403) Forbidden - even with a valid verisign certificate
Posted by aswathsn NO[at]SPAM gmail.com at 11/18/2006 9:31:29 AM
Hello Folks,
Here is my problem:
I have a console app that is trying to connect to an asp.net webservice
hosted by a third party and runs in a secure mode(HTTPS). My code is
running on Windows 2000 Professional and the web service is running on
Windows 2003 Server ("SERVER"). As I said the ... more >>
SignedCms.ComputeSignature(CmsSigner) - Keyset does not exist
Posted by kplkumar at 11/17/2006 6:47:16 AM
I have searched quite a bit and could not find an answer to this error
I am getting.
ContentInfo contentInfo = new ContentInfo(msgBytes);
SignedCms signedCms = new SignedCms(contentInfo);
CmsSigner cmsSigner = new CmsSigner(Certificate); // pass X509
certificate
signedCms.ComputeSign... more >>
Need help with DirectorySearcher FILTER using SID.
Posted by Pucca at 11/15/2006 7:04:02 PM
Hi, I'm using vs2005, .net 2.0. I have the following method that retrieves
the AD object's current login name. The search is returnning null when it
shouldn't. I think there's problem with my byte array's allocation. Or
maybe there's another way to do this? I saw 2.5.5.17 SID format in a ... more >>
Setting CAS Policy for WinForm control in WebForm
Posted by Neil.Smith NO[at]SPAM cityofbristol.ac.uk at 11/15/2006 2:09:15 AM
Hello,
Interesting problem that someone may have an idea about. I have
developed a simple windows user control that is embedded in a asp.net
web form like so:
<object id="Object2"
classid="http://myserver/cobcapplaunch/COBCApplicationLauncher.exe#COBCApplicationLauncher.AnotherControl"
he... more >>
Minimum Permissions Required to Run ASP.NET
Posted by corey.burnett NO[at]SPAM gmail.com at 11/14/2006 10:41:09 AM
I have a web server running IIS 6. The network security team here has
completely locked down the server. They have installed an application
called Cisco Security Agent (CSA). What CSA does is deny or allow
access to certain files and folders. Currently they have it set up
very restrictively ... more >>
Redirect when User is Unauthorized
Posted by David at 11/14/2006 7:43:01 AM
Hello,
I am using Windows Authentication and Role based authorization to secure my
web application. I would like to redirect to an Unauthorized page if a user
tries to access the web site and does not have the proper credentials. I
first tried adding a section to the customErrors web.conf... more >>
How do I use windowsIdentity to start a process in .net?
Posted by brett.mack NO[at]SPAM gmail.com at 11/14/2006 6:42:17 AM
Hello, and thanks in advance.
I'm using the logonuser function within vb.net to obtain a
windowsIdentity. Now how do I start a process using it, within vb.net?
I need all functions after obtaining the windowsIdentity to use it.
... more >>
Do i need to got Https:// throught the website ???
Posted by Ananth Ramasamy Meenachi at 11/13/2006 3:36:02 AM
Hi All,
An organization has a website which goes with windows
authentication to access their website and this website is accessed by their
employee around 60,000 and accessed with a frequency atleast once in a day or
more. They use https:// throught the website, Does is necessary ?... more >>
How to decrypt CAPICOM data i .NET 2.0
Posted by Karel Kral at 11/13/2006 12:00:00 AM
Hello,
I have CAPICOM encrypted data. Data cames from VB6 application (see
sample bellow). Now I want to decrypt this data in VB.NET (or C#).
Are there native .NET 2.0 library to decrypt CAPICOM data or I must have
import CAPICOM interop and use this one?
Example of VB.NET encryption:
Di... more >>
how to add "Authorization: Basic" for a web service call
Posted by Ottavio at 11/10/2006 3:17:20 AM
Hello,
I'm having some problems with the authentication during a web service
call
I know I have to add the "Authorization: Basic xxxxxxxx" in the http
header (not soap header) but I can't find a way to add it.
I've tryed to use ethereal to watch what I'm sending and I can see all
the header
(... more >>
LocalSystem network access problem
Posted by Scewbedew at 11/10/2006 2:15:01 AM
I have a C# Service running as localSystem, and that service needs to access
a network share on another computer. When attempting to access the share, my
service gets an "Access denied" error even though the security settings on
the share should allow access. (Everyone: Read)
If I run my s... more >>
IE C# ActiveX without permissons
Posted by Brutus at 11/9/2006 9:45:57 AM
Hi, I'm porting a VB ActiveX to C# .Net. The C# ActiveX is called from
IE as following:
<OBJECT id="myControl1" name="myControl1"
classid="ClassLibrary1.dll#ClassLibrary1.Class2" width="0" height="0">
</OBJECT>
The class is created and runs Ok until the following line
string path = Pa... more >>
Winform: Call a vbscript with elevated privileges
Posted by Jim Andersen at 11/9/2006 12:00:00 AM
I am making a .NET 2.0 WinForms application.
It lets a "normal" user select one or more scripts to be run with Admin
(sort of) privileges. And their actions get logged in a database.
How do I run a script as another user?
It's not super secret stuff we are talking about. Embedding the nam... more >>
How to show the windows 'Connect To' dialog from C#
Posted by Brad Marshall at 11/8/2006 11:16:02 AM
I am trying to build an application that uses Active Directory to perform
authorization and authentication. The client application is a windows forms
'smart client'. The client application needs to get the
System.Security.Principal.WindowsIdentity.GetCurrent().Token and send it to
the middle... more >>
FullTrust on network drive
Posted by Martin Hart at 11/7/2006 6:25:48 PM
Hi:
I am trying to run a .NET 2.0 app from a network drive, but I'm getting
an error on startup.
I have configured the .NET security as follows:
My Computer / Runtime Security Policy / Machine / Code Groups / All_Code
/ LocalIntranet_Zone = FullTrust
I think the problem is that I'm usi... more >>
Code Access Policy Zone Problem
Posted by Fran Parker at 11/7/2006 3:04:36 PM
Hi, I'm having a problem related to Code Access Policy zones. I have a .NET
2.0 executable that when run directly from a local drive letter (e.g.
c:\Test\MyEXE.EXE) works just fine. However, if I share the folder that the
EXE is in and then attempt to run it through the share, it will fail t... more >>
SIgning a dll after compilation
Posted by Hagay Lupesko at 11/7/2006 2:51:59 AM
Hi all,
I need to sign a dll after it was compiled and linked.
Is this possible?
Thanks, Hagay.
... more >>
Why am I getting errors when I want to rebuild the TreeView contro
Posted by Pucca at 11/6/2006 12:48:02 PM
Hi, I'm able to get the Domain object using GetDomain . I want to rebuild my
tree using this new domain so I pass in the new DNS. I update that in the
DirectoryEntry object's path. But I'm getting the following error message:
DirectoryServicesCOMException(ox8007202B): A referral was return... more >>
User creation....
Posted by Joe at 11/6/2006 12:26:02 PM
I am fairly new at .NET programming so excuse this basic question.
I have an application that I would like to create a user in AD with based on a
Template account that exists. The information about the user will be provided
by a provisioning database.
My problem is I am not sure of the best... more >>
Login error when opening a deployed project
Posted by chris at 11/6/2006 9:20:38 AM
I've developed a Windows Forms Application in Visual Studio 2003. I
built an MSI package using the setup and deployment projects setup
wizard. I ran the MSI package on my machine (where I developed the
application) to install it and I can run the application just fine. I
deployed it on another m... more >>
Is there a function that I can call to validate a domain?
Posted by Pucca at 11/5/2006 2:45:01 PM
Hi, I'm using vs2005 and C#. In my application I am allowing the user to
enter a string representing a domain that they would like the appl to connect
to and build a TreeView control based on AD objects in the domain that they
entered. Is there a function that I can call to validate the stri... more >>
Forms Authentication with Active Directory, login control crashes
Posted by etierra at 11/3/2006 8:11:02 PM
Hi,
I'm developing an ASP.net 2.0 application that use Forms Authentication. I’m
using the login control that came with V.S. 2005. I configured my web.config
to use Active Directory Membership/Authentication. Everything works fine. I
can login using the correct username and password, and... more >>
Security Exception
Posted by Danilo Rizzo at 11/2/2006 2:40:07 PM
I developed a c# console application, but when i run this application i
have this result:
Exception not handled: Syste.Security.SecurityExceptions:
StrongNameIdentityPermission
Can you help me?!
i have signed my application in this way:
sn -s sn.snk
and add path in assembly.cs
If i t... more >>
Is all .NET assembles are vulnerable to decompilation ?
Posted by vighnesh at 11/1/2006 12:00:00 AM
Hi All
Is there anyway to protect .NET assemblies from being decompiled ? As I came
to know that there is a tool called .NET Reflector to decompile the assembly
to Source code. Does this mean all .NET assembles are vulnerable? If not
Please advice, how could we protect from decompilation.a
... more >>
|