Thank you both for your insight. I'm glad I'm not the only one getting caught out with all this! ;-)
I'll add the header and report back if there are any more issues. Thanks again ...Col --- In [email protected], "Carson Hager" <[EMAIL PROTECTED]> wrote: > > Colin, > > Dave is spot on with his recommendation. IE is particularly bad about > caching content even when it's not supposed to such as within https > sessions. Use thse cache headers that Dave specified and IE will stop > caching. I have found that I only need the following but Dave's > suggested headers will clearly due the trick. > > response.setHeader("Cache-Control", "max-age=0, must-revalidate"); > > Carson > > ____________________________________________ > > Carson Hager > Cynergy Systems, Inc. > http://www.cynergysystems.com > > Email: [EMAIL PROTECTED] > Office: 866-CYNERGY > Mobile: 1.703.489.6466 > > > > -----Original Message----- > From: [email protected] [mailto:[EMAIL PROTECTED] On > Behalf Of colinblackmore > Sent: Friday, December 09, 2005 2:04 PM > To: [email protected] > Subject: [flexcoders] Re: Unable to retrieve data via HTTPService over > https in *IE*. > > Indeed he is! :-) > > However... with regard to the fix, I seem to have spoken to quickly. > > Although adding the FormAuthenticator valve fixed the immediate > problem I was experiencing, it seems to also cause other issues > (again, this only appears on IE). > > My application has a polling thread that periodically calls a specific > URL. With the FormAuthenticator valve enabled, the behaviour > 'appears' to be that the HTTPService is called, the response handler > is fired, but *the server never receives a request*. > > What makes it even stranger is that the response handler has a valid > response definition. > > My hunch is that setting the disableProxyCaching=false is working > against me in this case and only the first call is ever making it to > my servlet. > > Make sense? Any thoughts? > > ...Col > > --- In [email protected], Rey Bango <[EMAIL PROTECTED]> wrote: > > > > Carson's the man. ;) > > > > Rey... > > > > Carson Hager wrote: > > > My pleasure. I know that's a tricky one. We confronted it about a > year > > > ago and most thought we had lost our minds. Turns out few people had > > > used that combination at that point which seemed fairly odd to us. > > > Anyway, I'm glad you found it useful. > > > > > > > > > Carson > > > > > > ____________________________________________ > > > > > > Carson Hager > > > Cynergy Systems, Inc. > > > http://www.cynergysystems.com > > > > > > Email: [EMAIL PROTECTED] > > > Office: 866-CYNERGY > > > Mobile: 1.703.489.6466 > > > > > > > > > > > > -----Original Message----- > > > From: [email protected] > [mailto:[EMAIL PROTECTED] On > > > Behalf Of colinblackmore > > > Sent: Thursday, December 08, 2005 8:38 AM > > > To: [email protected] > > > Subject: [flexcoders] Re: Unable to retrieve data via HTTPService > over > > > https in *IE*. > > > > > > Fantastic! That worked. You saved me a 'lot' of time and effort!! > > > > > > Thank you for taking the time. I really appreciate it. > > > > > > ...Col > > > > > > --- In [email protected], "Carson Hager" > <[EMAIL PROTECTED]> > > > wrote: > > > > > >>Excellent. In META-INF, you will need a context.xml file that looks > > >>like this. This instructs Tomcat to use the FormAuthenticator value > > > > > > and > > > > > >>turns off proxy caching. This will fix the problem of the header > being > > >>sent to IE which it cannot handle. If you don't have a META-INF > > >>directory, just create it in the root of your web app right next to > > >>WEB-INF. You will need to reload your web application or restart > > >>Tomcat. > > >> > > >> > > >><?xml version="1.0" encoding="UTF-8"?> > > >><Context path=""> > > >> <Valve > > >> > > >>className="org.apache.catalina.authenticator.FormAuthenticator" > > >> disableProxyCaching="false" /> > > >> > > >> <WatchedResource>WEB-INF/web.xml</WatchedResource> > > >> <WatchedResource>META-INF/context.xml</WatchedResource> > > >> <WatchedResource>WEB-INF/web.xml</WatchedResource> > > >> <WatchedResource>META-INF/context.xml</WatchedResource> > > >> <WatchedResource>WEB-INF/web.xml</WatchedResource> > > >> <WatchedResource>META-INF/context.xml</WatchedResource> > > >></Context> > > >> > > >> > > >> > > >>Carson > > >> > > >>____________________________________________ > > >> > > >>Carson Hager > > >>Cynergy Systems, Inc. > > >>http://www.cynergysystems.com > > >> > > >>Email: [EMAIL PROTECTED] > > >>Office: 866-CYNERGY > > >>Mobile: 1.703.489.6466 > > >> > > >> > > >> > > >>-----Original Message----- > > >>From: [email protected] [mailto:[EMAIL PROTECTED] > > > > > > On > > > > > >>Behalf Of colinblackmore > > >>Sent: Thursday, December 08, 2005 7:54 AM > > >>To: [email protected] > > >>Subject: [flexcoders] Re: Unable to retrieve data via HTTPService > over > > >>https in *IE*. > > >> > > >>Form based authentication. > > >> > > >>--- In [email protected], "Carson Hager" > <[EMAIL PROTECTED]> > > >>wrote: > > >> > > >>>You've run into a fun little nuance with Tomcat/IE/HTTPS and Auth. > > > > > > The > > > > > >>>good news is that there is an easy fix. Are you using Form or Basic > > >>>auth? > > >>> > > >>> > > >>>Carson > > >>> > > >>>____________________________________________ > > >>> > > >>>Carson Hager > > >>>Cynergy Systems, Inc. > > >>>http://www.cynergysystems.com > > >>> > > >>>Email: [EMAIL PROTECTED] > > >>>Office: 866-CYNERGY > > >>>Mobile: 1.703.489.6466 > > >>> > > >>> > > >>> > > >>>-----Original Message----- > > >>>From: [email protected] > [mailto:[EMAIL PROTECTED] > > >> > > >>On > > >> > > >>>Behalf Of colinblackmore > > >>>Sent: Thursday, December 08, 2005 7:21 AM > > >>>To: [email protected] > > >>>Subject: [flexcoders] Re: Unable to retrieve data via HTTPService > > > > > > over > > > > > >>>https in *IE*. > > >>> > > >>>Carson... > > >>> > > >>>OK, now I'm confused! :-D > > >>> > > >>>I disabled the security constraints and it now works! > > >>> > > >>>So I guess my questions now are: > > >>> > > >>>a) Why do the browsers (Firefox/IE) behave differently in this > > >> > > >>respect? > > >> > > >>>b) How can I configure things to have both authentication AND https > > >>>within IE? > > >>> > > >>>Again to restate, I am using Tomcat, but not using the flashproxy > > >>>(since I'm using form based authentication which the proxy doesn't > > >>>handle). > > >>> > > >>>Many thanks for your help. > > >>> > > >>>...Col > > >>> > > >>>--- In [email protected], "Carson Hager" > > > > > > <[EMAIL PROTECTED]> > > > > > >>>wrote: > > >>> > > >>>>Are you possibly operating within an authenticated session? > > >>>> > > >>>> > > >>>>Carson > > >>>> > > >>>> > > >>>>____________________________________________ > > >>>> > > >>>>Carson Hager > > >>>>Cynergy Systems, Inc. > > >>>>http://www.cynergysystems.com > > >>>> > > >>>>Email: [EMAIL PROTECTED] > > >>>>Office: 866-CYNERGY > > >>>>Mobile: 1.703.489.6466 > > >>>> > > >>>> > > >>>> > > >>>>-----Original Message----- > > >>>>From: [email protected] > > > > > > [mailto:[EMAIL PROTECTED] > > > > > >>>On > > >>> > > >>>>Behalf Of colinblackmore > > >>>>Sent: Tuesday, December 06, 2005 1:15 PM > > >>>>To: [email protected] > > >>>>Subject: [flexcoders] Unable to retrieve data via HTTPService over > > >>> > > >>>https > > >>> > > >>>>in *IE*. > > >>>> > > >>>>I have a flex application that works perfectly when deployed under > > >>> > > >>>http. > > >>> > > >>>>However, when I attempt to connect via https none of the > > > > > > HTTPService > > > > > >>>>calls return successfully. > > >>>> > > >>>>The odd thing is that this only occurs when using https on > > > > > > Internet > > > > > >>>>Explorer (6.0). Both Firefox (1.5) and Opera (8.51) work fine > > > > > > under > > > > > >>>>both http and https. > > >>>> > > >>>>Some additional information: > > >>>> > > >>>>- The fault code from the HTTPService is: > > >>>> fault: (Object) > > >>>> faultcode: Client.Disconnected (String) > > >>>> faultstring: Could not retrieve data. (String) > > >>>>- I am *not* using the flex proxy. > > >>>>- Calling the HTTPService URL directly from the browser works > > > > > > fine. > > > > > >>>>It's only when flex attempts to call it from the client. > > >>>>- Tomcat 5.5 is the web-server. > > >>>>- I added the following crossdomain.xml to both the server root > > > > > > and > > > > > >>>the > > >>> > > >>>>context root (to no avail). > > >>>> > > >>>><cross-domain-policy> > > >>>> <allow-access-from domain="*" secure="false" /> > > >>>></cross-domain-policy> > > >>>> > > >>>>Again, this is only an issue with IE. Anyone out there > > > > > > successfully > > > > > >>>>serving a flex app to IE over https? > > >>>> > > >>>>Thanks in advance > > >>>> > > >>>>...Col > > >>>> > > >>>> > > >>>> > > >>>> > > >>>> > > >>>>------------------------ Yahoo! Groups Sponsor > > >>> > > >>>--------------------~--> > > >>> > > >>>>Get Bzzzy! (real tools to help you find a job). Welcome to the > > > > > > Sweet > > > > > >>>>Life. > > >>>>http://us.click.yahoo.com/KIlPFB/vlQLAA/TtwFAA/nhFolB/TM > > >>>> > > >>> > > > > --------------------------------------------------------------------~-> > > > > > >>>>-- > > >>>>Flexcoders Mailing List > > >>>>FAQ: > > >> > > >>http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt > > >> > > >>>>Search Archives: > > >>>>http://www.mail-archive.com/flexcoders%40yahoogroups.com > > >>>>Yahoo! Groups Links > > >>>> > > >>> > > >>> > > >>> > > >>> > > >>> > > >>> > > >>> > > >>> > > >>>-- > > >>>Flexcoders Mailing List > > >>>FAQ: > > > > > > http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt > > > > > >>>Search Archives: > > >>>http://www.mail-archive.com/flexcoders%40yahoogroups.com > > >>>Yahoo! Groups Links > > >>> > > >> > > >> > > >> > > >> > > >> > > >> > > >> > > >> > > >>-- > > >>Flexcoders Mailing List > > >>FAQ: > http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt > > >>Search Archives: > > >>http://www.mail-archive.com/flexcoders%40yahoogroups.com > > >>Yahoo! Groups Links > > >> > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > Flexcoders Mailing List > > > FAQ: > http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt > > > Search Archives: > > > http://www.mail-archive.com/flexcoders%40yahoogroups.com > > > Yahoo! Groups Links > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > Flexcoders Mailing List > > > FAQ: > http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt > > > Search Archives: > http://www.mail-archive.com/flexcoders%40yahoogroups.com > > > Yahoo! Groups Links > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > Flexcoders Mailing List > FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt > Search Archives: > http://www.mail-archive.com/flexcoders%40yahoogroups.com > Yahoo! Groups Links > ------------------------ Yahoo! Groups Sponsor --------------------~--> Most low income households are not online. Help bridge the digital divide today! http://us.click.yahoo.com/I258zB/QnQLAA/TtwFAA/nhFolB/TM --------------------------------------------------------------------~-> -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/flexcoders/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
