submission doesn't work in https

[JamesGu]

Hi,

I am using xforms in our application. It works well in http. When I switch to https, there is a problem.

There is a submission on page. When I click the button to send the submission. It reports an error "Server didn't respond with valid XML". I checked the log and find the action URL was not called and the login URL was called. It seems the submission didn't send any session information and weblogic server returns the login page.

It there any idea on this problem?

I am using Orbeon Forms Release 3.7.0beta1.200808240812 under weblogic 10.

Thanks,
James

[Erik Bruchez]

I know we have successfully used HTTPS in some cases, so it is  
probably not a general issue. Try enabling XForms logging and see if  
the logs report something abnormal.

-Erik

On Jun 16, 2009, at 4:24 AM, JamesGu wrote:

>
> Hi,
>
> I am using xforms in our application. It works well in http. When I  
> switch
> to https, there is a problem.
>
> There is a submission on page. When I click the button to send the
> submission. It reports an error "Server didn't respond with valid  
> XML". I
> checked the log and find the action URL was not called and the login  
> URL was
> called. It seems the submission didn't send any session information  
> and
> weblogic server returns the login page.
>
> It there any idea on this problem?
>
> I am using Orbeon Forms Release 3.7.0beta1.200808240812 under  
> weblogic 10.
>
> Thanks,
> James
> --
> View this message in context: http://www.nabble.com/submission-doesn%27t-work-in-https-tp24052065p24052065.html
> Sent from the ObjectWeb OPS - Users mailing list archive at  
> Nabble.com.
>
>
> --
> You receive this message as a subscriber of the [hidden email]  
> mailing list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws

--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

[JamesGu]

mytest.zip

Eric,

I found it is related withe security setting of application server. HTTPS works well if I remove all security-constraint in my application.

I downloaded your 3.7.1 version (orbeon-dev-3.7.1.200905272119.zip) and tried it in my weblogic server. The submission doesn't work when I use auth-method "FORM"

    <login-config>
        <auth-method>FORM</auth-method>

I created a small example.

1. Please extract the files of the zip file attached.
2. It is an EAR package. There are two files under META-INF. There is some priority setting in weblogic-application.xml. There is required to run this on weblogic 10 which I am using. If you are using other application server, "ops" folder is the only folder required, and you can just create a war.
3. Copy all files under orbeon.war into "ops" folder. I didn't include these files because they are too large. Please do not overwirte web.xml and weblogic.xml. I added some security setting at the end of web.xml
4. There is a "test" folder under apps folder. I put all my examples there.
5. In weblogic server, you need to create a weblogic user "abc" with a group "TESTROLE" (defined in web.xml).
6. Open URL, http://localhost/test/ops/test/page.
input username and password, click "Search", you will see message "this is a test".

7. Open URL, https://localhost/test/ops/test/page.
input username and password, click "Search", the submission failed without any error message.

8. I put two log files in zip.
In http.log, everything works well.
In https.log, there is no return . I think maybe the submissio URL is rejected by weblogic server.


I will be appreciated if you could spend some time on this. Please let me know if I missed some configuration. Currently I am using a valid ssl certificate.


Thanks,
James

[Erik Bruchez]

James,

Thank you very much for the example. This is probably outside the
scope of this mailing-list though at it looks like a multi-hour task.

-Erik

On Thu, Jul 2, 2009 at 2:43 AM, JamesGu<[hidden email]> wrote:

>
> http://www.nabble.com/file/p24303961/mytest.zip mytest.zip
>
> Eric,
>
> I found it is related withe security setting of application server. HTTPS
> works well if I remove all security-constraint in my application.
>
> I downloaded your 3.7.1 version (orbeon-dev-3.7.1.200905272119.zip) and
> tried it in my weblogic server. The submission doesn't work when I use
> auth-method "FORM"
>
>    <login-config>
>        <auth-method>FORM</auth-method>
>
> I created a small example.
>
> 1. Please extract the files of the zip file attached.
> 2. It is an EAR package. There are two files under META-INF. There is some
> priority setting in weblogic-application.xml. There is required to run this
> on weblogic 10 which I am using. If you are using other application server,
> "ops" folder is the only folder required, and you can just create a war.
> 3. Copy all files under orbeon.war into "ops" folder. I didn't include these
> files because they are too large. Please do not overwirte web.xml and
> weblogic.xml. I added some security setting at the end of web.xml
> 4. There is a "test" folder under apps folder. I put all my examples there.
> 5. In weblogic server, you need to create a weblogic user "abc" with a group
> "TESTROLE" (defined in web.xml).
> 6. Open URL, http://localhost/test/ops/test/page.
> input username and password, click "Search", you will see message "this is a
> test".
>
> 7. Open URL, https://localhost/test/ops/test/page.
> input username and password, click "Search", the submission failed without
> any error message.
>
> 8. I put two log files in zip.
> In http.log, everything works well.
> In https.log, there is no return . I think maybe the submissio URL is
> rejected by weblogic server.
>
>
> I will be appreciated if you could spend some time on this. Please let me
> know if I missed some configuration. Currently I am using a valid ssl
> certificate.
>
>
> Thanks,
> James
> --
> View this message in context: http://www.nabble.com/submission-doesn%27t-work-in-https-tp24052065p24303961.html
> Sent from the ObjectWeb OPS - Users mailing list archive at Nabble.com.
>
>
>
> --
> You receive this message as a subscriber of the [hidden email] mailing list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
>
>

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws