[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15888242#comment-15888242 ] Jacques Le Roux commented on OFBIZ-9206: On demos the same problem exists on the ecommerce side (w/o passing by the backend, catalog/product) * Stable a trunk When you login in ecommerce it's generates this URL https://demo-stable.ofbiz.apache.org/ecommerce/control/checkLogin/main and a blank page (actually a 404, you see it with ecomseo and in trunk which uses ecomseo by default), but if you update (F5) the page it works, same for logout. * old same kind of issue but generates a SSL_ERROR_RX_RECORD_TOO_LONG I revert all and will see later... > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Assignee: Jacques Le Roux >Priority: Minor > Attachments: OFBIZ-9206.patch, ofbiz-vm2.apache.org.yaml > > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[
https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15888142#comment-15888142
]
Jacques Le Roux commented on OFBIZ-9206:
OK I was ready to close this issue with this message
{quote}
Fixed in
trunk r1784549 + r1784558
R16.11 r1784550 + r1784559
R15.11 & 14.11 r1784556+ r1784560
R13.07 r1784745
{quote}
I even wrote that
{quote}
It was an easy fix, I just imported
in trunk demo and all work perfectly.
{quote}
But I missed one point: how deep the ecommerce webapp is entrenched in some
applications components. This can at least be tested with product and catalog
webapp.
# Get to
https://demo-stable.ofbiz.apache.org/catalog/control/EditProduct?productId=GZ-1000
# Click on the "Product Page" button (you may notice an error which has been
"fixed", more a workaround, at OFBIZ-9234)
# Click on the logout link you get to
https://demo-stable.ofbiz.apache.org/ecommerce/control/main but also to blank
page, you just got a 404. The same happens locally, it's not related to demos,
the letsencrypt certificate or the HTTPD frontend config.
If you replace ecommerce/control/main by ecomseo in the URL, it works again.
IIRW this was the initial reason I switched the trunk demo link from the site
home page to ecomseo.
Also if you replace ecommerce by ecomseo in CatalogMenus.xml then all works
really perfectly. What I could do is to make this a parameter, but if you look
for "ecommerce" in applications you find 96 harcoded "ecommerce" strings. Among
the 96 harcoded "ecommerce" strings I could replace those that have a relation
with URLs generation by "ecomseo" and that would be it.
But at this stage I think we need to think more about it. I see 3 alternatives:
# Fixes the underlying problems with ecommerce, good luck while shaving the
yak! See OFBIZ-9234 and OFBIZ-9235 I already crossed while working on the
current issue, for instance.
# My proposition above to replace "ecommerce" strings by "ecomseo". But I know
some are reluctants about that because the ecomseo specifications have not been
defined. Though we also have no specifications for ecommerce, I can understand
this concern. It would be good to have ecomseo specifications defined before
definitely switching to it. I thought about reverting and keep up later. But I
fear it's a risk of loosing momentum and have to do it again if other changes
stack on. I'll rather retroengineer ecomseo to explain what really changes. If
I can't explain all at a functional level, I'll ask Jinghai and especially
Jonathan Schikowski, anyway I already planned to do so.
# This is only related to the logout when coming from catalog/product, and a
simpler way is to remove all ecommerce links from applications. We anyway want
to remove dependencies from plugins in applications. And I believe it's where
we should start.
I'm inclided to the 3rd option, I'll create a thread on dev ML to discuss about
the 3 points above.
In the meantime, I'll now restart the demos and change the link from the site
home page, for at least test and let test.
> Login and logout process in demos shows a certificate issue
> ---
>
> Key: OFBIZ-9206
> URL: https://issues.apache.org/jira/browse/OFBIZ-9206
> Project: OFBiz
> Issue Type: Bug
> Components: Demo
>Reporter: Jacques Le Roux
>Assignee: Jacques Le Roux
>Priority: Minor
> Attachments: OFBIZ-9206.patch, ofbiz-vm2.apache.org.yaml
>
>
> When, from the site main page http://ofbiz.apache.org/, you get to the demos
> depending on browser (tested on Windows 7) you get some issues:
> * FF
> ** Management Apps: OK
> ** Ecommerce: OK
> * Chrome (Management Apps or Ecommerce)
> ** stable: OK
> ** old: KO - If you copy the URL by hand it works, and after even from the
> main page it works.
> ** trunk: OK
> * IE, same than Chrome
> If, from any browser, you logout from Management Apps you get a certificate
> issue. Actually as we use HSTS the browsers protect us from any 3rd party
> intrusions... Same issue when login in.
> So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960.
> Maybe it's due to how OFBiz redirects when login in or login out because, so
> far, only the login page is concerned...
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15884428#comment-15884428 ] Leonard Lin commented on OFBIZ-9206: Hi [~jacques.le.roux] I tested the patch with a load balancer and it worked for me. load balancer listens to https:443 ofbiz internally runs on https:8443 The links generated are https://hostname:443/url I didn't even add the SystemProperty entry The only comment I would have is that the port-number 443 is not needed for protocol https https://hostname:443/catalog/control/login; name="loginform"> but it works > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Assignee: Jacques Le Roux >Priority: Minor > Attachments: OFBIZ-9206.patch > > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15884172#comment-15884172 ] Jacques Le Roux commented on OFBIZ-9206: Thanks Leonard, Actually I asked you to test in OFBIZ-9224 because I thought it's maybe related but it could be it's not and then better to report your tries there, thanks. > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Assignee: Jacques Le Roux >Priority: Minor > Attachments: OFBIZ-9206.patch > > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15884167#comment-15884167 ] Leonard Lin commented on OFBIZ-9206: [~jacques.le.roux] ah wait, I just read through your fix and let me redeploy behind a reverse proxy and try again. sorry my bad > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Assignee: Jacques Le Roux >Priority: Minor > Attachments: OFBIZ-9206.patch > > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15884160#comment-15884160 ] Leonard Lin commented on OFBIZ-9206: Hi [~jacques.le.roux] , thanks for working on this. I applied your patch. added the "" into the table. Login mask now still shows the hostname:port in the urls. I'm not quiet sure if I follow the discussion above. What's the intended behaviour? In which cases should it show the full hostname+port and in which cases it should not? Based on looking at it, for me it would make sense that it should never generate the full hostname:port url, unless it's explicitly set in the url.properties / SystemProperty table. But I'm not sure if I understand all the cases/scenarious Best Leo --copy-paste- https://localhost:8443/catalog/control/login; name="loginform"> User Name Password https://localhost:8443/catalog/control/forgotPassword_step1;>Forgot Your Password? > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Assignee: Jacques Le Roux >Priority: Minor > Attachments: OFBIZ-9206.patch > > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15883587#comment-15883587 ] Jacques Le Roux commented on OFBIZ-9206: Of course, for a site not protected by a certificate (like when developing with localhost) and because if port.https is empty we rely on the port in the 1st request sent, you need to put the correct port when login in, something like https://localhost:8443/catalog/control/login. Then all follow... > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Assignee: Jacques Le Roux >Priority: Minor > Attachments: OFBIZ-9206.patch > > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15869718#comment-15869718 ] Jacques Le Roux commented on OFBIZ-9206: I started with https://github.com/apache/infrastructure-puppet/pull/181 > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Priority: Minor > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15868680#comment-15868680 ] Jacques Le Roux commented on OFBIZ-9206: BTW I just reopened OFBIZ-7928 which is related > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Priority: Minor > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15868673#comment-15868673 ] Jacques Le Roux commented on OFBIZ-9206: Hi Michael, it's somehow explained at INFRA-11960. For your proposition about removing the links it would be better to ask opinions on the dev ML. > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Priority: Minor > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15868492#comment-15868492 ] Michael Brohl commented on OFBIZ-9206: -- The current state prevents Firefox users from accessing the site. After login, the certificate warning page is displayed, stating that the application uses HTTP Strict Transport Security (HSTS) and does not allow to enter an exception to show the page regardless of the false certificate informations. I know nothing about the specific configurations of the ASF server but it's a fairly common use case to have several OFBiz instances running on different ports mapped against different subdomains using SSL certificates. Can you explain what makes our configuration special? I propose to remove the demo links from our website as long as we have these problems because I think it puts the project in a bad light. > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Priority: Minor > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15860813#comment-15860813 ] Jacques Le Roux commented on OFBIZ-9206: Not only Login and logout process have issues but also all webtools links, for all demos versions. I reverted r1781842 at r1782432 > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Priority: Minor > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15856192#comment-15856192 ] Jacques Le Roux commented on OFBIZ-9206: We crossed on wire Pierre, your summary is better, put back > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Priority: Minor > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
