Re: [flexcoders] Remoting over HTTPS fails in IE 6.0
Not really a solution but... We've seen something happen in SSL and Remoting with Internet Explorer and certificates that are NOT fully verified.Take a look at this blog post on Gary Matthew Roger's site and see if that make sense: http://www.gmrweb.net/2005/08/18/flash-remoting-https-internet-explorer/Leif On 1/10/06, Mykola Paliyenko [EMAIL PROTECTED] wrote: Hi Peter, No I meant exactly what I've said when I open it using https://bla-bla/index.mxml remoting works fine in IE, but when I do it using http://bla-bla/index.mxml it loads nothing no request come to the amf gateway The problem is that I use remoting over https with gateway URL Something like this: secureGatewayURL = https://localhost:8443/sonoportal/amfgateway ; this.secureGatewayConnection = new Connection(); this.secureGatewayConnection.connect(secureGatewayURL); return new Service( null, null, spring://authenticationManager, this.secureGatewayConnection, null) And it silently does not connect via HTTPS protocol, I've used Paros Proxy to debug it, just http requests all https are ignored. In Firefox everything works fine, it loads swf over http and then ask me to accept certificate and after acceptance all calls over https are successfull. my crossdomain.xml islooks very simple: ?xml version=1.0? !DOCTYPE cross-domain-policy SYSTEM http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd cross-domain-policy allow-access-from domain=* secure=false/ /cross-domain-policy I think something wrong with IE or player 8.0. Does anyone have success with the scenario when swf is loaded via http and data interaction is done via https in IE? WBR, Mykola -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com SPONSORED LINKS Web site design development Computer software development Software design and development Macromedia flex Software development best practice YAHOO! GROUPS LINKS Visit your group flexcoders on the web. To unsubscribe from this group, send an email to: [EMAIL PROTECTED] Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service . -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com YAHOO! GROUPS LINKS Visit your group "flexcoders" on the web. To unsubscribe from this group, send an email to:[EMAIL PROTECTED] Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
Re: [flexcoders] Remoting over HTTPS fails in IE 6.0
Leif Thanx for the link, I've tried it before and it does not help. I think problem is in IE security, no idea but it does not send any https remoting call to the server. On 1/10/06, Leif Wells [EMAIL PROTECTED] wrote: Not really a solution but... We've seen something happen in SSL and Remoting with Internet Explorer and certificates that are NOT fully verified.Take a look at this blog post on Gary Matthew Roger's site and see if that make sense: http://www.gmrweb.net/2005/08/18/flash-remoting-https-internet-explorer/ Leif On 1/10/06, Mykola Paliyenko [EMAIL PROTECTED] wrote: Hi Peter, No I meant exactly what I've said when I open it using https://bla-bla/index.mxml remoting works fine in IE, but when I do it using http://bla-bla/index.mxml it loads nothing no request come to the amf gateway The problem is that I use remoting over https with gateway URL Something like this: secureGatewayURL = https://localhost:8443/sonoportal/amfgateway ; this.secureGatewayConnection = new Connection(); this.secureGatewayConnection.connect(secureGatewayURL); return new Service( null, null, spring://authenticationManager, this.secureGatewayConnection, null) And it silently does not connect via HTTPS protocol, I've used Paros Proxy to debug it, just http requests all https are ignored. In Firefox everything works fine, it loads swf over http and then ask me to accept certificate and after acceptance all calls over https are successfull. my crossdomain.xml islooks very simple: ?xml version=1.0? !DOCTYPE cross-domain-policy SYSTEM http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd cross-domain-policy allow-access-from domain=* secure=false/ /cross-domain-policy I think something wrong with IE or player 8.0. Does anyone have success with the scenario when swf is loaded via http and data interaction is done via https in IE? WBR, Mykola -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com SPONSORED LINKS Web site design development Computer software development Software design and development Macromedia flex Software development best practice YAHOO! GROUPS LINKS Visit your group flexcoders on the web. To unsubscribe from this group, send an email to: [EMAIL PROTECTED] Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service . -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com YAHOO! GROUPS LINKS Visit your group flexcoders on the web. To unsubscribe from this group, send an email to: [EMAIL PROTECTED] Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service. -- WBR, Mykola -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com YAHOO! GROUPS LINKS Visit your group "flexcoders" on the web. To unsubscribe from this group, send an email to:[EMAIL PROTECTED] Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
[flexcoders] Remoting over HTTPS fails in IE 6.0
Hi guys I have a following problem I have a page index.mxml that need to be able to pass data to the server via HTTPS when I open it using https://bla-bla/index.mxml remoting works fine in IE, but when I do it using http://bla-bla/index.mxml it loads nothing no request come to the amf gateway. In Firefox everything works fine (I have setup crossdomain.xml properly) I've read lots of hints about caching problem in IE but seems that I faced another problem. The problem is that I do not want to overload server and download swfs to the user via HTTPS, I just want to be able to transfer some data via secure channel I'm using player 8.0 in IE 6.0, Flex 1.5. Any ideas about what could it be? -- WBR, Mykola -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com YAHOO! GROUPS LINKS Visit your group "flexcoders" on the web. To unsubscribe from this group, send an email to:[EMAIL PROTECTED] Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
RE: [flexcoders] Remoting over HTTPS fails in IE 6.0
From reading your subject line, did you mean the opposite of what you said below? That is, did you mean: when I open it using http://bla-bla/index.mxml remoting works fine in IE, but when I do it using https://bla-bla/index.mxml it loads nothing no request come to the amf gateway RemoteObject uses NetConnection over HTTP (or HTTPS) so it's just like a normal POST request. This means it is subject to the same restrictions as any other connection made from Flash Player 7 (or later). This also means it is subject to the SSL caching problems with MSIE irrespective of how your SWF was loaded. I imagine you're hitting one of these two problems. http://www.macromedia.com/devnet/flash/articles/fplayer_security.htm states: "Macromedia Flash movies served over HTTP (or other insecure protocols) are no longer allowed to access movies or data served over HTTPS." and "HTTPS restriction is asymmetrical; movies served over HTTPS can access other documents served over insecure protocols." and "If the HTTPS restriction affects your moviethat is, a non-HTTPS server serves the movie, but the movie downloads data from an HTTPS serveradd the secure="false" attribute to your allow-access-from tag, as in the following example:allow-access-from domain="www.mysite.com" secure="false" /" If you do have your crossdomain.xml file setup correct as stated above, then it's likely you'll need to debug the HTTPS header traffic to see whether the offending headers are being sent to the MSIE client in the response. Note that in order to debug HTTPS traffic you'll need a client side proxy, such as Paros Proxy,to intercept and debug the otherwise encrypted traffic. You then will have to determine which application on the server is adding the offending headers and devise a way to stop them from being added as it's unlikely you're going to be able to get each client to change their registry to stop the bug in MSIE. Pete From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Mykola PaliyenkoSent: Tuesday, January 10, 2006 5:24 AMTo: flexcoders@yahoogroups.comSubject: [flexcoders] Remoting over HTTPS fails in IE 6.0 Hi guysI have a following problemI have a page index.mxml that need to be able to pass data to the server via HTTPSwhen I open it using https://bla-bla/index.mxml remoting works fine in IE, but when I do it using http://bla-bla/index.mxml it loads nothing no request come to the amf gateway.In Firefox everything works fine (I have setup crossdomain.xml properly)I've read lots of hints about caching problem in IE but seems that I faced another problem.The problem is that I do not want to overload server and download swfs to the user via HTTPS,I just want to be able to transfer some data via secure channelI'm using player 8.0 in IE 6.0, Flex 1.5.Any ideas about what could it be?-- WBR, Mykola -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com YAHOO! GROUPS LINKS Visit your group "flexcoders" on the web. To unsubscribe from this group, send an email to:[EMAIL PROTECTED] Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
