The solution is to route your request through an https "proxy" connection on your server, let it do the http request, and return to you the result via https.
I have added a bit to JSmolCore.js that corrects for this, and that will be in a near future release. But it will mean that you will have to set Info.serverURL to point to an https version of jsmol.php on your server (i.e., not mine!) Bob On Wed, Aug 12, 2015 at 10:15 PM, Vinushka Schalk <stefan.schal...@ncf.edu> wrote: > Hello, > > I don't think there's much that can be done about this on the JSmol code > side, but I wanted to report that, of the three search options supported by > JSmol, two of them (NCI and RCSB) fail when your application is deployed on > an HTTPS site. This is because cactus.nci.nih.gov and rcsb.org have no > HTTPS side of the site, so all your requests will fail due to the > same-origin policy. > > As far as I know, there aren't any easy ways of circumventing this (for > good reason), so if you're putting JSmol on HTTPS you'll just have to deal > with this for now. Removing HTTPS is not an option, our website is on a > server controlled by the federal government, and HTTPS is now required. > > I've already tried to contact the Cactus administrators to get HTTPS, > which they should be doing anyway given the requirement. Can anyone in this > list help with the RCSB folk? I know getting an SSL cert is not trivial (at > least until https://letsencrypt.org/ goes up in a few weeks), but it's > something to think about. > > Thankfully, PubChem has an HTTPS version of the site, which is > automatically redirecting JSmol's requests. This is probably a good sign > for Cactus support soon. > > If you're running JSmol on an HTTP site, this should not be a problem. > > --Vinushka > > > > ------------------------------------------------------------------------------ > > _______________________________________________ > Jmol-users mailing list > Jmol-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/jmol-users > > -- Robert M. Hanson Larson-Anderson Professor of Chemistry Chair, Department of Chemistry St. Olaf College Northfield, MN http://www.stolaf.edu/people/hansonr If nature does not answer first what we want, it is better to take what answer we get. -- Josiah Willard Gibbs, Lecture XXX, Monday, February 5, 1900
------------------------------------------------------------------------------
_______________________________________________ Jmol-users mailing list Jmol-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jmol-users
