all groups > dotnet security > august 2007
Filter by week: 1 2 3 4 5
Backing up and restoring encryption key
Posted by Matt P at 8/30/2007 5:34:02 AM
I am using User Level DPAPI encryption in a C# .net 2.0 Application. If i
need to move the application to another machine how can i move the encryption
key over.
The encrypted data is stored in a database on another machine.
I was under the impression that as long as i use the same usernam... more >>
Secure Credential's pwd handling
Posted by Paolo Pagano at 8/29/2007 3:08:54 PM
Hi,
I need to provide my own network credentials to a web request (in a Windows
Forms Application):
HttpWebRequest req = ...
req.Credentials = new NetworkCredential( userName, PWD, userDomain );
how to manage PWD from 'input by user' to 'NetworkCredential' in a security
safe ma... more >>
Documents with customisation attached to emails fail to open with customisation.
Posted by Sharat Koya at 8/29/2007 7:58:59 AM
Hi,
when sending a document with VSTO customisation via email the
recipient recieves the document but they cannot open it directly from
the outlook email by double clicking. The document opens but the
customisation fails and they get the following error message:
System.IO.FileLoadExceptio... more >>
Client Cert Delegation to Web Service
Posted by hepsubah at 8/29/2007 6:34:00 AM
I have some secure ASP.NET Web Services (which could become WCF
services) used to generate a secure ASP.NET page. Is there any way to
delegate (impersonate?) the client cert from the user accessing the
page to the secure service ?
Thanks in advance
Doug
... more >>
Login to a different domain from ASP.NET application
Posted by Juan Manuel Porras Gálvez at 8/29/2007 5:52:20 AM
Hello all,
I've got a problem with the authentication of my ASP.NET application. The
question is how to authenticate in a NT domain from my ASP.NET application
placed on a different domain which is trusted (trusting) to it. The trusted
relationship are in both sides (from NT domain to Activ... more >>
Capturing a Client Cert and Passing it to a Secure Web Service
Posted by hepsubah at 8/28/2007 1:38:38 PM
I'm trying to capture a client cert in my ASP.NET application, and use
that cert as the client cert for a call to secure web service.
I've used the following code, but am getting a 403 error on the
invocation of the service. All the service is supposed to do is
return the subject of the passe... more >>
How to convert a SecureString into an encrypted String in a secure manner?
Posted by spam NO[at]SPAM brandt-lassen.dk at 8/28/2007 3:35:57 AM
I'm designing a system for Windows initiated Single Sign-On against
RACF.
I keep my RACF-passwords in fields of the new .net 2.0 type
System.Security.SecureString. I need to store these passwords in a SQL
server 2005 database between user sessions. Hence, I need to convert
the SecureString in... more >>
How to convert a SecureString into an encrypted String in a secure manner?
Posted by spam NO[at]SPAM brandt-lassen.dk at 8/28/2007 3:28:32 AM
<p><span>I'm designing a system for Windows
initiated Single Sign-On against RACF. </span></p>
<p><span>I keep my RACF-passwords in fields of the
new .net 2.0 type System.Security.SecureString. I need to store these
passwords
in a SQL server 2005 database between user sessions. Hence, I need ... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
I want to read a .pfx and use the private key to sign a document, is that "that" bad?
Posted by hubble at 8/27/2007 3:39:24 PM
I am trying to sign an xml document with a private key, reading the
key from a .pfx file. The code following.
string xml;
xml = Request.MapPath("/rsacert.pfx");
xml = HttpUtility.HtmlDecode(xml);
Trace.Write(xml);
Response.Write("<p/>");
X509Certificate2 cert = n... more >>
Role based security
Posted by Erick at 8/26/2007 5:24:26 PM
Can some one help me.
I'm trying to build framework in .net which uses role based security.
I want to be able to defined the roles in the web config e.g
Manager, PowerUser, Guest, AnonUser
I want to be able to map NT application groups to those roles in the
web config so that in my code I c... more >>
Makecert certificate generation headache
Posted by tsa NO[at]SPAM scandpowerit.no at 8/23/2007 12:49:24 AM
Hi, all!
I'm currently working on a .NET development project in which I'm
trying to figure out how to utilize makecert.exe, in order to issue a
pair of X.509 certificates for testing out the authentication scheme
of the solution. So far, however, I've not succeeded in providing the
makecert u... more >>
Manually computing sha1 digest of reference containing base64 encoded string and comparing it to digest value of same reference generated by SignedXML
Posted by sachinvyas NO[at]SPAM gmail.com at 8/21/2007 7:37:00 PM
I have an XML which I am trying to sign and provide it to one of my
users.
The XML has two nodes one which has public part which is not encrypted
and other which is private data. The data in private node has data
encrypted using users public key for transfering confidential
information ( base... more >>
System.Security.Cryptography.ProtectedData
Posted by Abhinav at 8/17/2007 9:51:14 AM
I was attempting to use this class however I do not see the =
ProtectedData class under System.Security.Cryptography. Any reason why!
This is what I have so far ...
Imports System.Security.Cryptography
Imports System.text.Encoding
Imports System
Public Class Security
Private S... more >>
Changing Visibility of Class/Class members in different assemblies
Posted by Amb k at 8/16/2007 5:52:42 PM
I have created an assembly, which contains two class (Cls1,cls2), in which
Cls1 contains 3 properties Prop1, Prop2,Prop3 and Cls2 contains some other
properties.
Now i am using this assembly (Add reference) in some other assemblies Assb1
and Assb2.
In Assb1 i do not want Cls2 to be visibl... more >>
web.config file
Posted by Andy at 8/14/2007 10:32:01 AM
Can anyone point me towards or share web.config settings to ensure security?
There are many defaults settings that may need to change to secure the apps.
I am not sure on all the setting, if someone can share the settings specialy
the most vulnerable that need to change that will be great.
... more >>
Impersonation - connecting to a machine in it's own workgroup
Posted by glennanthonyb at 8/2/2007 12:00:00 AM
Hi
I'm trying to check the status of a service running on a machine in its own
workgroup.
Is there anyway of impersonating a user in the workgroup to allow the
ServiceController to connect and retrieve the state of the service?
The process performing the check sits in a domain and is ru... more >>
|