Questions tagged [beast]

The “Browser Exploit Against SSL/TLS” is a vulnerability of the TLS 1.0 protocol discovered in 2011.

See tag beast-websockets for C++ Beast HTTP/Websocket library

61 questions
1
vote
0 answers

How to use client authentication certificate with boost?

I am trying to figure out how to tell Boost Beast to use a client authentication certificate during the SSL handshake. I have looked at the Boost Beast documentation, but have been unable to find any hint on client side certificates. The examples…
No Name
  • 19
  • 1
1
vote
2 answers

string_view points to another string

I'm using Boost 1.70 and found a rather puzzling issue where sometimes boost::string_view seems to point to another string. This is the function call where a boost::string_view is created as follows: boost::beast::string_view message = "The…
benjist
  • 2,740
  • 3
  • 31
  • 58
1
vote
2 answers

Call a boost function without callback

I am using boost-beast library for a websocket connection. You can refer to this example for the understanding what is happening. I have used the same example, but changed a few things: split the on_handshake(beast::error_code ec) into three…
RC0993
  • 898
  • 1
  • 13
  • 44
1
vote
1 answer

boost beast websocket connection close handler

I am new to boost and i am trying to write a simple chat application for websocket. For reference i'm using the websocket-server-sync example from the website. I made a global vector that stores websocket::streams, and in the do_session method after…
iron24
  • 101
  • 1
  • 4
  • 19
1
vote
1 answer

how to keep on websocket on boost::beast?

I referenced here documents about boost::beast websocket-async. I removed "ws_.async_close(websocket::close_code::normal..." on on_read function in order to avoid disconnection. But beast websocket is disconnected by ending…
geeeek
  • 375
  • 2
  • 13
1
vote
2 answers

Boost beast compilation error

d:\boost\boost\beast\core\detail\ostream.hpp(263): error C2955: 'boost::beast::detail::ostream_helper': use of class template requires template argument list When compiling example project: http_server_small.cpp (from…
Yuri Yaryshev
  • 991
  • 6
  • 24
1
vote
1 answer

HTTP Pipelining vs. WebSocket in Boost.Beast advanced server example

I have a question to this Boost.Beast example: https://github.com/boostorg/beast/blob/908f84cb3c023ed7c5bd19e2e5283d3218a6d820/example/advanced/server/advanced_server.cpp In line 643 a WebSocket upgrade is done. However, if I understand it…
Benjamin Buch
  • 4,752
  • 7
  • 28
  • 51
1
vote
1 answer

Two Rails applications, one userbase, looking for a simplest solution to handle this

I have two Rails applications, let's call them A and B. A has existing user base and i want these users to be able to log in to B with the username and password managed in A. B is altered version of Altered Beast forum and it would be nice if users…
Priit
  • 5,200
  • 2
  • 21
  • 20
1
vote
1 answer

OpenSSL: modes of operation in cipher suites

I am studying the BEAST attack for SSL 3.0 and TLS 1.0. To know the set of cipher suites supported by SSL 3.0, I typed in the following command: alice@debian:~$ openssl ciphers -V | grep SSLv3 0xC0,0x14 - ECDHE-RSA-AES256-SHA SSLv3 Kx=ECDH …
user2875834
1
vote
0 answers

Any issues talking with Java communicating with Active Directory over JNDI/LDAP/TLS due to BEAST fixes?

Both Microsoft and Java have made changes in order to address the BEAST vulnerability. Based on this MSDN article, it looks like some interoperability issues have crept up, Microsoft has apparently provided a SQL Server patch to help out with…
1
vote
0 answers

Is there any way to force web clients to use a secure SSL cipher (TLS 1.1/TC4) in my C# Web Server, to avoid BEAST attacks

I have a specialist web app written in C# - my C# code acts as a web server, accepts connections from browsers, and presents the app as web pages. The existing app uses SSL to secure the connection from the browser, but I am concerned about BEAST,…
Nikki Locke
  • 2,759
  • 6
  • 29
  • 53
0
votes
2 answers

Is there a replacement for Beast for Ruby on Rails

An open source project called Beast implemented a forum in about 500 lines of Ruby on Rails code. The project seems to have fallen silent (http://beast.caboo.se/). Is there an open source project that replaces beast and is compatible with the…
Cam Wolff
  • 1,420
  • 15
  • 13
0
votes
0 answers

Web Socket Beast client vs Spring boot web socket server

I am trying to do basic web socket programming with Spring boot as a web socket server and C++ Boost(Beast) as a web socket client. I can able to write sample programming and able to do connection between this server and client but could not…
Dhamotharan
  • 1
  • 1
  • 2
0
votes
1 answer

WebSocket handshake declined by remote peer

So I've been trying to follow the boost code for ssl websocket connections to binance, but I keep getting getting an error when trying to initiate the handshake. I've removed the load_root_certificates function btw because it was saying that the…
Sank
  • 11
  • 2
0
votes
0 answers

Having issues with Percentage calculation in DOMO card (BEAST mode)

Hi Experts, I have a dataset with columns (count , type and date col) , and calculating the percentage of the count in domo analyzer , as sum(count)/total count. But the problem is the date aggregation . Requirement : When i use the date range…
S V
  • 3
  • 3