This is a bug in the 8.0.22 player... if you use the 8.0.15 player, everything works fine. MM is going to fix it, we (me and another developer here) worked with MM Support and discovered this info last week. A bit late in posting, but I guess now with your info as well, this should help a few people.
Jimmy Gianninas
Optimal Payments Inc.
-----Original Message-----
From: flexcoders@yahoogroups.com on behalf of Jason R. Weiss
Sent: Wed 11/9/2005 8:06 PM
To: flexcoders@yahoogroups.com
Subject: [flexcoders] File Upload over HTTPS: Solved!
All,
There have been a lot of posts recently at the MACR web site, in the
MACR NNTP newsgroups and several threads here (as well as other
places) about using the file upload features over HTTPS.
Specifically, the problem many folks saw was that it worked great on
HTTP but failed with an IOError when using HTTPS. Earlier in the
week our team at Cynergy determined that it was clearly a
crossdomain.xml issue since HTTPS worked properly on ports above
1024, e.g. 8443. With this in mind, we set out to find the right
combination of settings to make HTTPS work properly on its home port
of 443.
We now have a working solution on two different servers and we
wanted to share this knowledge with the community.
The problem actually has several variables and factors that need to
be considered.
First and foremost, our formula for success relied on loadPolicyFile
():
System.security.loadPolicyFile
('https://flexdemos.cynergysystems.com/support/crossdomain.xml');
The docs of this method state that the player caches these policies,
so be sure to close all Flash Player instances down. The docs also
state that this call must occur before any access is attempted. In
our application we found that making the call several lines before
the upload was attempted failed. How do we know it failed? Our web
server access logs didn't show crossdomain.xml ever being
requested. Once we moved this line of code to be the first code
executed inside of our application's initialize event, we suddenly
saw the request come through on our access logs. At last- progress!
Progress, but not success. Uploading still failed with a bland
IOError. We ended up trying several different combinations, and
what we found was that we had to use explicit absolute URLs and port
numbers. Our crossdomain.xml file then read:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd";>
<cross-domain-policy>
<allow-access-from domain="flexdemos.cynergysystems.com" to-
ports="443" />
</cross-domain-policy>
Notice how we didn't use the * anywhere in the file- we explicitly
authorized our fully named domain and port 443.
Finally, the URL used to do the upload also required explicit
definition. We used:
https://flexdemos.cynergysystems.com:443/support/websrv/uploadservlet
?threadid=" + tId.toString();
Notice in particular that we explicitly set port 443. Not sure why
that was required, but it was and it works ;-)
With this combination of settings, we are successfully using
fileIO.swf with Flex 1.5/Flash Player 8 over HTTPS on port 443 in
production.
I hope this information is useful to many, if only to confirm that
the code MACR provided does indeed work properly. The debate will
now rage over the fact that absolute URLs and explicit ports have to
be declared- bug or not? Who knows...
HTH,
Jason
--
Jason Weiss
Cynergy Systems, Inc.
Macromedia Flex Alliance Partner
http://www.cynergysystems.com
Email: jasonDOTweissATcynergysystemsDOTcom
Office: 866-CYNERGY
--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com
________________________________
YAHOO! GROUPS LINKS
* Visit your group "flexcoders
<http://groups.yahoo.com/group/flexcoders> " on the web.
* To unsubscribe from this group, send an email to:
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
* Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .
________________________________
------------------------ Yahoo! Groups Sponsor --------------------~-->
Get Bzzzy! (real tools to help you find a job). Welcome to the Sweet Life.
http://us.click.yahoo.com/A77XvD/vlQLAA/TtwFAA/nhFolB/TM
--------------------------------------------------------------------~->
--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/flexcoders/
<*> To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
<<winmail.dat>>
