This is very good to hear. If any developer thinks they can do the following
very easy, please do so and post here to bring more attention to this issue
- it is a huge bug!

 

Step 1: Install apache (ssl version)

Step 2: install openssl if you don't have it already, and generate your
keys, etc.

Step 3: Configure apache to run ssl and non ssl from the same directory.
Verify with an html file.

Step 4: Install php, configure apache to use it. 

Step 5: Create a test project that uses filereference.upload, perhaps using
http://localhost/upload.php as the target. Verify this works.

Step 6: Change it to https://localhost/upload.php and watch it work in IE
but fail miserably in firefox.

Step 7: Post back to the list that you encountered the same bug. Or better
yet, it works for you over https and post here and let us know.

 

So far I have completed these steps about 7 times on different machines. Not
one of them worked.

If only the runtime's source code were open and I could indentify the
problem there.

So far only Flex Builder is open, am I right?

 

Seth

 

  _____  

From: [email protected] [mailto:[EMAIL PROTECTED] On
Behalf Of schneiderjim
Sent: Tuesday, September 25, 2007 5:23 PM
To: [email protected]
Subject: [flexcoders] Re: firefox and FileReference.upload over SSL - error
2038

 

If it's any consolation, I'm having the same problem, but have chosen
to bury my head in the sand for right now. One twist that I may add is
that we have an SSL accelerator in front of our app server, but I have
no idea what that may or may not do. Regardless, the problem still
exists for me. 

--- In [EMAIL PROTECTED] <mailto:flexcoders%40yahoogroups.com> ups.com,
"wizardry_wiz" <[EMAIL PROTECTED]> wrote:
>
> I have looked at the wireshark packets, which is how I know the image
> was never posted. I tried WebScarab this morning, and I must say that
> is my new favorite tool, thank you for pointing me at it. However,
> when I attempt the filereference.upload, it does not display anything
> having gone to it from the browser (although wireshark shows some ssl
> handshake attempt).
> This leads me to believe that the ssl handshake from flex to webscarab
> (using firefox) is failing. Which would indicate that there is nothing
> I can do as a developer and the bug is a part of the firefox plugin.
> 
> I'm surprised nobody has run into this yet; I guess uploads over SSL
> aren't that common. If it would help, I can mail you offlist a url
> with a login for you see exactly what is going wrong and wireshark/etc
> yourself.
> 
> Seth
> 
> --- In [EMAIL PROTECTED] <mailto:flexcoders%40yahoogroups.com> ups.com,
Tom Chiverton <tom.chiverton@>
> wrote:
> >
> > On Monday 24 Sep 2007, wiz@ wrote:
> > > not https - an error is immediately thrown, it appears to mishandle
> > > the ssl handshake, as image data is never actually sent in a post.
> > > Again, everything is fine in IE, just not in firefox.
> > 
> > Do you have WireShark/ethereal traces to back this up ?
> > What about WebScarab (or other SSL intercepting HTTP recorder)
output ?
> > 
> > -- 
> > Tom Chiverton
> > Helping to ambassadorially deploy value-added design-patterns
> > on: http://thefalken. <http://thefalken.livejournal.com> livejournal.com
> > 
> > ****************************************************
> > 
> > This email is sent for and on behalf of Halliwells LLP.
> > 
> > Halliwells LLP is a limited liability partnership registered in
> England and Wales under registered number OC307980 whose registered
> office address is at St James's Court Brown Street Manchester M2 2JF.
> A list of members is available for inspection at the registered
> office. Any reference to a partner in relation to Halliwells LLP means
> a member of Halliwells LLP. Regulated by the Law Society.
> > 
> > CONFIDENTIALITY
> > 
> > This email is intended only for the use of the addressee named above
> and may be confidential or legally privileged. If you are not the
> addressee you must not read it and must not use any information
> contained in nor copy it nor inform any person other than Halliwells
> LLP or the addressee of its existence or contents. If you have
> received this email in error please delete it and notify Halliwells
> LLP IT Department on 0870 365 8008.
> > 
> > For more information about Halliwells LLP visit www.halliwells.com.
> >
>

 

Reply via email to