[jira] [Updated] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux updated OFBIZ-9206: --- Attachment: ofbiz-vm2.apache.org.yaml Hi Leonard, bq. I didn't even add the SystemProperty entry Yes, as explained above it was only needed for my early tests on OFBiz demos. I'll commit the patch rather. bq. The only comment I would have is that the port-number 443 is not needed for protocol https Actually there is 2 aspects: # when working locally (locahost) w/o a certificate you need a port, by default it's 8443. # when using a server and a frontend w/ (or I guess rarely w/o) a certificate you define a port, by default it's 443. In either cases, when you login, the URL you use defines which port will be used by OFBiz internally. Because OFBiz picks this port and, if it works, keeps it as reference for creating new URLs. For instance the trunk demo uses 8443 (see attached ofbiz-vm2.apache.org.yaml for completeness) So when you type demo-trunk.ofbiz.apache.org you actually send it to demo-trunk.ofbiz.apache.org:443 wich is finally sent to OFBiz as ofbiz-vm2.apache.org:8443 through AJP. Note that since OFBIZ-6849 we use only HTTPS in OFBiz and it's enforced by a HSTS header. Note also that you can offset the port (all ports actually) using the portoffset feature. This is done with demos and for instance the stable demo responds on 18443 (or 18080 but hen HSTS forces to 18443) and old on 28443. Thanks for your feeback, it confirms that I can now switch the demos to the demo-*.ofbiz.apache.org URLs :) > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Assignee: Jacques Le Roux >Priority: Minor > Attachments: OFBIZ-9206.patch, ofbiz-vm2.apache.org.yaml > > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Updated] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jacques Le Roux updated OFBIZ-9206: --- Summary: Login and logout process in demos shows a certificate issue (was: Login or login out in demos shows a certificate issue) > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Priority: Minor > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Updated] (OFBIZ-9206) Login and logout process in demos shows a certificate issue
[ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Pierre Smits updated OFBIZ-9206: Summary: Login and logout process in demos shows a certificate issue (was: Loginor login out in demos shows a certificate issue) > Login and logout process in demos shows a certificate issue > --- > > Key: OFBIZ-9206 > URL: https://issues.apache.org/jira/browse/OFBIZ-9206 > Project: OFBiz > Issue Type: Bug > Components: Demo >Reporter: Jacques Le Roux >Priority: Minor > > When, from the site main page http://ofbiz.apache.org/, you get to the demos > depending on browser (tested on Windows 7) you get some issues: > * FF > ** Management Apps: OK > ** Ecommerce: OK > * Chrome (Management Apps or Ecommerce) > ** stable: OK > ** old: KO - If you copy the URL by hand it works, and after even from the > main page it works. > ** trunk: OK > * IE, same than Chrome > If, from any browser, you logout from Management Apps you get a certificate > issue. Actually as we use HSTS the browsers protect us from any 3rd party > intrusions... Same issue when login in. > So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. > Maybe it's due to how OFBiz redirects when login in or login out because, so > far, only the login page is concerned... -- This message was sent by Atlassian JIRA (v6.3.15#6346)
