[opencms-dev] Upload not working with secured workplace

[Pere Torrodellas]

Hello Fabian,

Now that you mention it, I remember having read about an alternate way of uploading, but I was not really aware of it 
because I had never had problems with the Java applet. Thanks for the tip!

As for the certificate import you mention, I think that this is only needed for client certificates, which I don't use 
in this case. Anyway, just in case I imported the server certificate in the Java keystore, but it didn't solve the 
problem: the upload applet continues to stop with the "Please wait..." message :-(

Also, the problem with the workplace switching to non-secure after a publication is still there. Not even the 
administration is protected.. It only switches back to secure when I edit something.

Any guess or suggestion?

Thanks,

Pere

----- Original Message ----- 
From: "Fabian Huschka" <fabian.huschka at componio.net>
To: "The OpenCms mailing list" <opencms-dev at opencms.org>
Sent: Monday, March 10, 2008 1:26 PM
Subject: Re: [opencms-dev] Upload not working with secured workplace


> Hello Pere,
>
> in case you are using the Java applet to upload and your SSL certificate
> ist not verifiable (e.g. self-signed) you need to import it to your
> local key-store (each machine the applet is invoked from).
> Otherwise you have the ability to switch to the plain upload by
> unchecking "Use Java applet for upload" within the user preferences dialog.
>
>
> Regards,
>
>
> \Fabian
>
> Pere Torrodellas schrieb:
>> Hello,
>>
>> I am testing how to secure the OpenCms workplace (version
>> 6.2.3) acessing it with SSL. I just modified opencms-system.xml:
>>
>> <workplace-server>https://myhost:8443</workplace-server>
>>
>> Everything seems to work fine with two exceptions:
>>
>> - When I upload a file, the window with "Please wait, uploading data"
>> stays forever and the upload does not complete. This works fine in the
>> same workplace without SSL.
>>
>> - When publishing a resource, the browser warns that some page
>> elements are not secure, the session reverts to non-secure, and stays
>> non-secure after that.
>>
>> Are these OpenCms limitations, or is there something else I should do
>> to have a fully working secure workplace?
>>
>> Thanks for any info,
>>
>> Pere
>>
>> ------------------------------------------------------------------------
>>
>>
>> _______________________________________________
>> This mail is sent to you from the opencms-dev mailing list
>> To change your list options, or to unsubscribe from the list, please visit
>> http://lists.opencms.org/mailman/listinfo/opencms-dev
>
>
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/mailman/listinfo/opencms-dev
>