HTTPS & Flex Client

Hi.. I am using Flex Native AS client which works fine over HTTP. Now I am trying to set it up over HTTPS. I ve done the following.

1. Modified lightstreamer_conf.xml, removed <http_server> and included <https_server> block with default parameters.
2. On the client side, modified the ConnectionInfo parameters to change the port, controlPort and the corresponding protocols.

When I try to access the flex page over https, I see the page being loaded but streaming doesnt happen. On the server side, I see a new session being created after invoking the notifyUser method on the MetadataAdapter but getItems or getSchema methods are not invoked. Am I missing something here?

Regards,
Venkatesan R

Hi Venkihere,

to let a Flex application downloaded through http access a web server over SSL, you must specify a secure=false attribute to the allow-access-from element in your crossdomain.xml file.
So in example, if your flex movie is downloaded via http://www.mycompany.com/ and you want to connect to Lightstreamer through https://push.mycompany.com/ an allow-access-from policy like the one below is not enough:
<allow-access-from domain="www.mycompany.com" />
you need something like this:
<allow-access-from domain="www.mycompany.com" secure="false" />

Hope that helps.

Hi.. Thank you for the reply.. But the page was downloaded over https..

Sorry...
Please could you describe

1. Your environment (how do you access web server and Lightstreamer server)
2. Your crossdomain.xml file
3. You ConnectionInfo configuration

Quote:

---

Originally Posted by Mone

1. Your environment (how do you access web server and Lightstreamer server)

---

I ve placed my flex page in the pages folder of lightstreamer. In lightstreamer_conf.xml, I ve enabled only the ssl server. I am accessing the page using a https url.

Quote:

---

Originally Posted by Mone

Your crossdomain.xml file

---

<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy>

Quote:

---

Originally Posted by Mone

You ConnectionInfo configuration

---

var cInfo:ConnectionInfo = new ConnectionInfo();
cInfo.setServer("push.mydomain.com");
cInfo.setAdapter("STOCKLISTDEMO");
cInfo.setControlPort(443);
cInfo.setPort(443);
cInfo.setControlProtocol("https");
cInfo.setProtocol("https");
cInfo.setUser("TEST_USER");
cInfo.setPassword("TEST_USER");

As a first view everything seems correct.

Are you able to run the standard StockListDemo (i.e. the html one) over SSL on your server?

Yeah.. The html stocklistdemo works over https..

Hi,

It's pretty strange.
Please check your server logs, do you see control connections (control.txt requests)?
Paste the log of a problematic session if possible.

Sorry for the delay.. I dont see any control requests.. only the following info gets logged periodically..

11.Oct.07 18:06:45,306 < INFO> Serving request: /lightstreamer/create_session.txt?LS_user=TEST_USER&LS_password=T EST_USER&LS_adapter=STOCKLISTD
EMO&LS_polling=true&LS_polling_millis=500&LS_idle_ millis=30000&LS_report_info=true& from 172.16.161.120:3693
11.Oct.07 18:06:45,306 <TRACE> Max allowed bandwidth for user TEST_USER = 0.0 Kbit/sec
11.Oct.07 18:06:45,306 <TRACE> Applying slowing factor of 1.0
11.Oct.07 18:06:45,306 < INFO> Starting new session: S-1513054843N6 from 172.16.161.120:3693
11.Oct.07 18:06:45,306 < INFO> Reused HTTPS connection on Lightstreamer HTTPS Server from 172.16.161.120:3693

I can't understand what is wrong with your app, so I do a little recap, let me know if you see something different from your conf.

My Lightstreamer server is on mone.lightstreamer.com (no it's not on the internet)

This is my Lightstreamer_conf.xml file (obviously is full of not-related-to-this-thread settings):
<?xml version="1.0"?><br /> <br /> <lightstreamer_conf><br /> <br /> <production><br /> <client_id>XXXXXX</client_id><br /> <license_path>vivace4.3.license</license_path><br /> <audit_logs>../audit</audit_logs><br /> </production><br /> <br /> <https_server name="Lightstreamer HTTPS Server"><br /> <port>443</port><br /> <keystore><br /> <keystore_file>myserver.keystore</keystore_file><br /> <keystore_password>mypassword</keystore_password><br /> </keystore><br /> </https_server><br /> <br /> <read_timeout_millis>20000</read_timeout_millis><br /> <br /> <log4j_properties>./lightstreamer_log_conf.xml</log4j_properties><br /> <br /> <collector_millis>2000</collector_millis><br /> <br /> <monitor_provider><br /> <public>Y</public><br /> <available_on_all_servers>Y</available_on_all_servers><br /> </monitor_provider><br /> <br /> <content_length><br /> <default>5000</default><br /> </content_length><br /> <br /> <max_still_millis>2000</max_still_millis><br /> <min_keepalive_millis>1000</min_keepalive_millis><br /> <session_timeout_millis>30000</session_timeout_millis><br /> <max_polling_millis>15000</max_polling_millis><br /> <br /> <web_server><br /> <enabled>Y</enabled><br /> <flex_crossdomain_enabled>Y</flex_crossdomain_enabled><br /> <flex_crossdomain_path>crossdomain.xml</flex_crossdomain_path><br /> <monitor_enabled>N</monitor_enabled><br /> </web_server><br /> <br /> </lightstreamer_conf>

myserver.keystore is the keystore file shipped with Lightstreamer.

This is my crossdomain.xml file: <?xml version="1.0"?><br /> <!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd"><br /> <cross-domain-policy><br /> <allow-access-from domain="*" /><br /> </cross-domain-policy>

I've placed my application under the pages directory of Lightstreamer.
This is the source code of the application:<?xml version="1.0" encoding="utf-8"?><br /> <mx:Application xmlns:mx="http://www.adobe.com/2006/mxml" layout="absolute" creationComplete="init();" viewSourceURL="srcview/index.html"><br /> <br /> <mx:TextArea x="10" y="397" width="615" height="81" id="myTextArea"/><br /> <br /> <mx:Script><br /> <![CDATA[<br /> import com.lightstreamer.as_client.events.NonVisualItemUp dateEvent;<br /> import com.lightstreamer.as_client.events.StatusChangeEve nt;<br /> import com.lightstreamer.as_client.NonVisualTable;<br /> import com.lightstreamer.as_client.ConnectionInfo;<br /> import com.lightstreamer.as_client.LSClient;<br /> <br /> <br /> public var items:Array = new Array("item1","item2","item3","item4","item5","ite m6","item7","item8","item9","item10");<br /> public var fields:Array = new Array("stock_name","last_price","time","pct_change ");<br /> <br /> private function init():void {<br /> var client:LSClient = new LSClient();<br /> var cInfo:ConnectionInfo = new ConnectionInfo("mone.lightstreamer.com");<br /> cInfo.setAdapter("STOCKLISTDEMO");<br /> cInfo.setControlPort(443);<br /> cInfo.setPort(443);<br /> cInfo.setProtocol("https");<br /> cInfo.setControlProtocol("https");<br /> cInfo.setUser("TEST_USER");<br /> cInfo.setPassword("TEST_USER");<br /> <br /> client.addEventListener(StatusChangeEvent.STATUS_C HANGE,onStatusChange);<br /> <br /> addNVT(client); <br /> <br /> client.openConnection(cInfo); <br /> <br /> } <br /> <br /> <br /> public function addNVT(client:LSClient):void {<br /> var nonVisualTable:NonVisualTable = new NonVisualTable(items,fields,"MERGE");<br /> nonVisualTable.setSnapshotRequired(true);<br /> nonVisualTable.addEventListener(NonVisualItemUpdat eEvent.NON_VISUAL_ITEM_UPDATE,onChange);<br /> <br /> client.subscribeTable(nonVisualTable);<br /> } <br /> <br /> public function onStatusChange(evt:StatusChangeEvent):void {<br /> myTextArea.text = evt.status;<br /> }<br /> <br /> <br /> public var lines:uint = 0;<br /> public var updateStr:String;<br /> public var cutAt:uint;<br /> <br /> <br /> public function onChange(evt:NonVisualItemUpdateEvent):void {<br /> if (lines >= 20) {<br /> cutAt = myTextArea.text.lastIndexOf("||");<br /> myTextArea.text = myTextArea.text.substring(0,cutAt);<br /> <br /> } else {<br /> lines++;<br /> <br /> }<br /> <br /> updateStr = "Item " + evt.item;<br /> updateStr += extractFieldUpdate(evt,"stock_name");<br /> updateStr += extractFieldUpdate(evt,"last_price");<br /> updateStr += extractFieldUpdate(evt,"time");<br /> if (lines > 1) {<br /> updateStr += "||\n";<br /> }<br /> <br /> myTextArea.text = flash.utils.getTimer() + ": " + updateStr + myTextArea.text;<br /> <br /> } <br /> <br /> public function extractFieldUpdate(evt:NonVisualItemUpdateEvent,fi eld:*):String {<br /> if (evt.isFieldChanged(field)) {<br /> return "| field " + field + " changed: " + evt.getFieldValue(field);<br /> } else {<br /> return "";<br /> } <br /> } <br /> <br /> ]]><br /> </mx:Script><br /> </mx:Application>

The adapter is the StockListDemo adapter as shipped with Lightstreamer.
My server version is 3.4.4 build 1362.

I open the application with this url: https://mone.lightstreamer.com/fl/a.swf
I obviously can see the pushed values.
Can you see any differnces?

A Turning Point.. I regenerated the keystore and the application started working with Firefox. But it is still not working with IE. On further search, came across this page.

http://kb.adobe.com/selfservice/view...7b5c&sliceId=2

There are two steps in fixing it.
1. Turning off the no-cache settings
2. Manually installing the SSL certificate.

I did step 2. But how do I do step 1?

Hello venkihere,

To apply step 1 you have to wait for the next distribution. I will let you know as soon as it will be available.

Just a little note, step 2 seems to be necessary only if working on a 2 server (Lightstreamer + web server) environment.

Thank you.

We are waiting for it.. :)

Thank you..

The online distribution has been updated to include the management for step 1 (Server build 1376).
Thank you for your collaboration, venkihere.

Step 2 still remains as an open problem. If
- the swf file is not loaded from Lightstreamer Server, but from an external web server
- it performs a connection to Lightstreamer Server in SLL
- the certificate is not valid
then the player will not ask you for acceptance, but will refuse the certificate, unless you install it in the browser.
However, the third condition is only possible in a test scenario, hence the limitation is not critical.

It only remains unclear why you could make the demo working on Firefox only after regenerating your keystore.

Dario