Colin, In answer to your question of why the browsers worked different, as best our research into the HTTP specs un-veiled, this appears to be a bug in IE6. The issue is related to a specific cache-control header being set by Tomcat when both HTTP auth and SSL are used with a binary file. This isn't Flex/Flash related. The same thing would happen with any binary file transfer (and we proved that to be true). This specific combination of headers sends IE into la-la land. That valve setting slightly changes the headers to avoid this apparant browser "bug".
As Carson mentioned, I've always been extremely surprised no one else ever brings this little quark up. We likely have had much more "real-world" deployments which is why we found this so long ago. To me I can't picture many serious business applications that don't need both SSL and Authentication together! Then again it could be that it does seem specfic to Tomcat. (Its worth noting we believe Tomcat was setting a quite appropriate header) Glad we helped out. This one had us scratching our heads for a couple nights. -- Dave Wolf Cynergy Systems, Inc. Macromedia Flex Alliance Partner http://www.cynergysystems.com Email: [EMAIL PROTECTED] Office: 866-CYNERGY --- In [email protected], "Carson Hager" <[EMAIL PROTECTED]> wrote: > > My pleasure. I know that's a tricky one. We confronted it about a year > ago and most thought we had lost our minds. Turns out few people had > used that combination at that point which seemed fairly odd to us. > Anyway, I'm glad you found it useful. > > > Carson > > ____________________________________________ > > Carson Hager > Cynergy Systems, Inc. > http://www.cynergysystems.com > > Email: [EMAIL PROTECTED] > Office: 866-CYNERGY > Mobile: 1.703.489.6466 > > > > -----Original Message----- > From: [email protected] [mailto:[EMAIL PROTECTED] On > Behalf Of colinblackmore > Sent: Thursday, December 08, 2005 8:38 AM > To: [email protected] > Subject: [flexcoders] Re: Unable to retrieve data via HTTPService over > https in *IE*. > > Fantastic! That worked. You saved me a 'lot' of time and effort!! > > Thank you for taking the time. I really appreciate it. > > ...Col > > --- In [email protected], "Carson Hager" <[EMAIL PROTECTED]> > wrote: > > > > Excellent. In META-INF, you will need a context.xml file that looks > > like this. This instructs Tomcat to use the FormAuthenticator value > and > > turns off proxy caching. This will fix the problem of the header being > > sent to IE which it cannot handle. If you don't have a META-INF > > directory, just create it in the root of your web app right next to > > WEB-INF. You will need to reload your web application or restart > > Tomcat. > > > > > > <?xml version="1.0" encoding="UTF-8"?> > > <Context path=""> > > <Valve > > > > className="org.apache.catalina.authenticator.FormAuthenticator" > > disableProxyCaching="false" /> > > > > <WatchedResource>WEB-INF/web.xml</WatchedResource> > > <WatchedResource>META-INF/context.xml</WatchedResource> > > <WatchedResource>WEB-INF/web.xml</WatchedResource> > > <WatchedResource>META-INF/context.xml</WatchedResource> > > <WatchedResource>WEB-INF/web.xml</WatchedResource> > > <WatchedResource>META-INF/context.xml</WatchedResource> > > </Context> > > > > > > > > Carson > > > > ____________________________________________ > > > > Carson Hager > > Cynergy Systems, Inc. > > http://www.cynergysystems.com > > > > Email: [EMAIL PROTECTED] > > Office: 866-CYNERGY > > Mobile: 1.703.489.6466 > > > > > > > > -----Original Message----- > > From: [email protected] [mailto:[EMAIL PROTECTED] > On > > Behalf Of colinblackmore > > Sent: Thursday, December 08, 2005 7:54 AM > > To: [email protected] > > Subject: [flexcoders] Re: Unable to retrieve data via HTTPService over > > https in *IE*. > > > > Form based authentication. > > > > --- In [email protected], "Carson Hager" <[EMAIL PROTECTED]> > > wrote: > > > > > > You've run into a fun little nuance with Tomcat/IE/HTTPS and Auth. > The > > > good news is that there is an easy fix. Are you using Form or Basic > > > auth? > > > > > > > > > Carson > > > > > > ____________________________________________ > > > > > > Carson Hager > > > Cynergy Systems, Inc. > > > http://www.cynergysystems.com > > > > > > Email: [EMAIL PROTECTED] > > > Office: 866-CYNERGY > > > Mobile: 1.703.489.6466 > > > > > > > > > > > > -----Original Message----- > > > From: [email protected] [mailto:[EMAIL PROTECTED] > > On > > > Behalf Of colinblackmore > > > Sent: Thursday, December 08, 2005 7:21 AM > > > To: [email protected] > > > Subject: [flexcoders] Re: Unable to retrieve data via HTTPService > over > > > https in *IE*. > > > > > > Carson... > > > > > > OK, now I'm confused! :-D > > > > > > I disabled the security constraints and it now works! > > > > > > So I guess my questions now are: > > > > > > a) Why do the browsers (Firefox/IE) behave differently in this > > respect? > > > b) How can I configure things to have both authentication AND https > > > within IE? > > > > > > Again to restate, I am using Tomcat, but not using the flashproxy > > > (since I'm using form based authentication which the proxy doesn't > > > handle). > > > > > > Many thanks for your help. > > > > > > ...Col > > > > > > --- In [email protected], "Carson Hager" > <[EMAIL PROTECTED]> > > > wrote: > > > > > > > > Are you possibly operating within an authenticated session? > > > > > > > > > > > > Carson > > > > > > > > > > > > ____________________________________________ > > > > > > > > Carson Hager > > > > Cynergy Systems, Inc. > > > > http://www.cynergysystems.com > > > > > > > > Email: [EMAIL PROTECTED] > > > > Office: 866-CYNERGY > > > > Mobile: 1.703.489.6466 > > > > > > > > > > > > > > > > -----Original Message----- > > > > From: [email protected] > [mailto:[EMAIL PROTECTED] > > > On > > > > Behalf Of colinblackmore > > > > Sent: Tuesday, December 06, 2005 1:15 PM > > > > To: [email protected] > > > > Subject: [flexcoders] Unable to retrieve data via HTTPService over > > > https > > > > in *IE*. > > > > > > > > I have a flex application that works perfectly when deployed under > > > http. > > > > However, when I attempt to connect via https none of the > HTTPService > > > > calls return successfully. > > > > > > > > The odd thing is that this only occurs when using https on > Internet > > > > Explorer (6.0). Both Firefox (1.5) and Opera (8.51) work fine > under > > > > both http and https. > > > > > > > > Some additional information: > > > > > > > > - The fault code from the HTTPService is: > > > > fault: (Object) > > > > faultcode: Client.Disconnected (String) > > > > faultstring: Could not retrieve data. (String) > > > > - I am *not* using the flex proxy. > > > > - Calling the HTTPService URL directly from the browser works > fine. > > > > It's only when flex attempts to call it from the client. > > > > - Tomcat 5.5 is the web-server. > > > > - I added the following crossdomain.xml to both the server root > and > > > the > > > > context root (to no avail). > > > > > > > > <cross-domain-policy> > > > > <allow-access-from domain="*" secure="false" /> > > > > </cross-domain-policy> > > > > > > > > Again, this is only an issue with IE. Anyone out there > successfully > > > > serving a flex app to IE over https? > > > > > > > > Thanks in advance > > > > > > > > ...Col > > > > > > > > > > > > > > > > > > > > > > > > ------------------------ Yahoo! Groups Sponsor > > > --------------------~--> > > > > Get Bzzzy! (real tools to help you find a job). Welcome to the > Sweet > > > > Life. > > > > http://us.click.yahoo.com/KIlPFB/vlQLAA/TtwFAA/nhFolB/TM > > > > > > > > > > --------------------------------------------------------------------~-> > > > > > > > > -- > > > > Flexcoders Mailing List > > > > FAQ: > > http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt > > > > Search Archives: > > > > http://www.mail-archive.com/flexcoders%40yahoogroups.com > > > > Yahoo! Groups Links > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > Flexcoders Mailing List > > > FAQ: > http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt > > > Search Archives: > > > http://www.mail-archive.com/flexcoders%40yahoogroups.com > > > Yahoo! Groups Links > > > > > > > > > > > > > > > > > > > > > -- > > Flexcoders Mailing List > > FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt > > Search Archives: > > http://www.mail-archive.com/flexcoders%40yahoogroups.com > > Yahoo! Groups Links > > > > > > > > > > -- > Flexcoders Mailing List > FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt > Search Archives: > http://www.mail-archive.com/flexcoders%40yahoogroups.com > Yahoo! Groups Links > ------------------------ Yahoo! Groups Sponsor --------------------~--> 1.2 million kids a year are victims of human trafficking. Stop slavery. http://us.click.yahoo.com/.QUssC/izNLAA/TtwFAA/nhFolB/TM --------------------------------------------------------------------~-> -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/flexcoders/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
