topic Re: Share over SSL alert in Internet Explorer in Alfresco Archive

Share over SSL alert in Internet Explorer

aheaven — Wed, 25 Feb 2009 01:40:41 GMT

Hi ! I added a SSL connector on port 443 in Tomcat, and now I am accessing Share in https without any problem except for a warning in Internet Explorer that says that I have secured and non-secured content… I get that in any page even after removing the Alfresco Network dashlet that causes the sam

Re: Share over SSL alert in Internet Explorer

aheaven — Wed, 25 Feb 2009 03:31:02 GMT

Seems to be related to :

https://issues.alfresco.com/jira/browse/ETHREEOH-972?page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel

Is there any possible fix right now with community edition ?

Re: Share over SSL alert in Internet Explorer

mikeh — Wed, 25 Feb 2009 09:05:28 GMT

The only fix right now would be to use an Apache web server to handle the SSL requests rather than Tomcat directly.

UPDATE: The fix has just been applied to HEAD, so if you grab the source from SVN and rebuild you'll be ok.

Mike

Re: Share over SSL alert in Internet Explorer

aheaven — Wed, 25 Feb 2009 19:57:35 GMT

Thanks for the heads up ! I did that and it solved the problem, that's great !

We are ready for production now ! I'm really happy with the product, will be used by a couple of hundreds of people in our company !

Re: Share over SSL alert in Internet Explorer

mikeh — Wed, 25 Feb 2009 20:51:05 GMT

That's great to hear. Please encourage your users to feed-back (both good and bad!) and raise any issues and enhancement requests in JIRA so we can continue to improve the product.

Thanks,
Mike

Re: Share over SSL alert in Internet Explorer

sylvain_d — Tue, 03 Mar 2009 17:52:04 GMT

Hello,

I did something similar, an apache server to handle https.

However since that the upload with share did work.

Is there something else to set up share with HTTPS ?

thanks

Re: Share over SSL alert in Internet Explorer

mikeh — Tue, 03 Mar 2009 20:49:30 GMT

There are known issues with Flash and https-secured sites when accessed with browsers other than MSIE.

Please see https://issues.alfresco.com/jira/browse/ETHREEOH-884

Thanks,
Mike

Re: Share over SSL alert in Internet Explorer

sylvain_d — Tue, 24 Mar 2009 09:18:20 GMT

Hello,

As it's said in the Jira, I tried to patch my community version with the class only MessagesWebScript

However, when restarting Share I got the following stack


09:39:32,659 ERROR [org.apache.catalina.core.ContainerBase.[Standalone].[].[/share]] Exception sending context initialized         event to listener instance of class org.springframework.web.context.ContextLoaderListener
org.springframework.beans.factory.CannotLoadBeanClassException: Error loading class [org.alfresco.web.scripts.MessagesWebScript] for bean with name 'w        ebscript.org.alfresco.web.messages.get' defined in class path resource [alfresco/web-framework-application-context.xml]: problem with class file or de        pendent class; nested exception is java.lang.ClassFormatError: Invalid constant pool index 63 in class file org/alfresco/web/scripts/MessagesWebScript
Caused by: java.lang.ClassFormatError: Invalid constant pool index 63 in class file org/alfresco/web/scripts/MessagesWebScript
        at java.lang.ClassLoader.defineClass1(Native Method)
        at java.lang.ClassLoader.defineClass(ClassLoader.java:620)
        at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:124)
        at org.apache.catalina.loader.WebappClassLoader.findClassInternal(WebappClassLoader.java:1812)
        at org.apache.catalina.loader.WebappClassLoader.findClass(WebappClassLoader.java:866)
        at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1319)
        at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1198)
        at org.springframework.util.ClassUtils.forName(ClassUtils.java:201)
        at org.springframework.beans.factory.support.AbstractBeanDefinition.resolveBeanClass(AbstractBeanDefinition.java:327)
        at org.springframework.beans.factory.support.AbstractBeanFactory.resolveBeanClass(AbstractBeanFactory.java:1075)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:346)
        at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:270)
        at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:160)
        at org.springframework.context.support.AbstractApplicationContext.getBean(AbstractApplicationContext.java:733)
        at org.alfresco.web.scripts.DeclarativeRegistry.initWebScripts(DeclarativeRegistry.java:313)
        at org.alfresco.web.scripts.DeclarativeRegistry.reset(DeclarativeRegistry.java:174)
        at org.alfresco.web.scripts.AbstractRuntimeContainer.reset(AbstractRuntimeContainer.java:231)
        at org.alfresco.web.scripts.AbstractRuntimeContainer.onApplicationEvent(AbstractRuntimeContainer.java:254)
        at org.springframework.context.event.SimpleApplicationEventMulticaster$1.run(SimpleApplicationEventMulticaster.java:77)
        at org.springframework.core.task.SyncTaskExecutor.execute(SyncTaskExecutor.java:49)
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:75)
        at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:246)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:355)
        at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:244)
        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:187)
        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:49)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3729)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4187)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
        at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:608)
        at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:535)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:470)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
        at org.apache.catalina.core.StandardService.start(StandardService.java:450)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:745)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

It seems that the class version is not know or something like that.

Any ideas ?

Should I change the whole jar ? (alfresco-webscript-framework.jar)

thanks

Re: Share over SSL alert in Internet Explorer

mikeh — Tue, 24 Mar 2009 09:31:12 GMT

HEAD has moved on a lot since that update. I'd recommend either manually patching by looking at the SVN diff info, or grab the whole tree and get the Enterprise bug fixes too.

Thanks,
Mike

Re: Share over SSL alert in Internet Explorer

sylvain_d — Mon, 30 Mar 2009 12:06:42 GMT

I grabed the alfresco-web-framework.jar for the last nightybuild and put it in my share/WEB-INF/lib folder

Even if the MessagesWebScript.class is correct (no http link for the commuynity picture) I still have a warning in IE telling that some element are not secure.

With an header capture tool I can see a request made to http://alfresco...community…

Re: Share over SSL alert in Internet Explorer

rbowman — Tue, 02 Jun 2009 20:27:27 GMT

Hey guys,

I'm having this same issue (secure/non-secure items pop-up in IE). I have noticed that the nightly builds are now for 3.2 preview. Where can I get an updated version of the alfresco-web-framework.jar? Do I need to do anything else to get rid of the pop-up alert?

I am currently running the latest stable version of alfresco labs on OpenSuSE 10.3/MySQL. I am handling the SSL connections with apache.

I did try the alfresco-web-framework.jar from the 3.2 preview nightly builds, and it didn't work (as expected). Crashed the whole application looking for a slingshot template that does not exist in the latest stable version.

Thanks,
-Roger Bowman

Re: Share over SSL alert in Internet Explorer

sylvain_d — Tue, 02 Jun 2009 20:43:49 GMT

Hi !

I finally succeed. I've taken the source from the svn and compiled my own MessagesWebScript.class before put it in the web-inf/… Share folder to overide the one from the jar.

I deleted the line that refer to http://alfresco……

Re: Share over SSL alert in Internet Explorer

rbowman — Thu, 04 Jun 2009 20:40:32 GMT

I believe I have a solution as well. What I have done is downloaded the 3.2 preview files. I then grabbed the MessagesWebScript.class file from the 3.2 preview version and added it to the 3 final version alfresco-web-framework.jar. This has gotten rid of the "Secure and Non Secure" items popup window from IE and seems to have not broken anything else in the process. Hope this helps someone!

Just out of curiosity, why didn't this get back-ported to version 3.0 final?

Thanks,
-Roger

Re: Share over SSL alert in Internet Explorer

mikeh — Thu, 04 Jun 2009 23:04:59 GMT

Just out of curiosity, why didn't this get back-ported to version 3.0 final?

We only tend to back-port critical bugs, i.e. those that could result in data loss or significantly reduced functionality.

The other reason could be that this was never raised as a bug in JIRA.

Thanks,
Mike