Modify

Opened 7 years ago

Closed 6 years ago

#9720 closed enhancement (fixed)

Remote control: listen also in HTTPS

Reported by: Don-vip Owned by: team
Priority: normal Milestone: 14.03
Component: Core remotecontrol Version:
Keywords: https Cc:

Description

From https://lists.openstreetmap.org/pipermail/talk/2014-February/069028.html:

it works by loading a localhost URL in a hidden frame but that is active content so will be blocked by modern browsers if loading http from https. So unless JOSM were to accept https connections to the remote control there isn't much we can do.

It's right, I have this error message from Chrome:

[blocked] The page at 'https://www.openstreetmap.org/#map=19/44.00013/12.58910' was loaded over HTTPS,
but ran insecure content from 'http://127.0.0.1:8111/load_and_zoom?left=12.586&top=44.001&right=12.591&bottom=43.999':
this content should also be loaded over HTTPS.

Attachments (0)

Change History (6)

comment:1 Changed 7 years ago by stoecker

Hmm, what cert do we want to provide?

comment:2 Changed 7 years ago by stoecker

Under Linux we could try to generate a local one when openssl is installed.

comment:3 Changed 7 years ago by Don-vip

It would be better to ship one. We could also generate it from Java but I fear it requires a JDK, not only a JRE.

comment:4 Changed 7 years ago by Don-vip

There's also the option of http://docs.oracle.com/javase/6/docs/jre/api/net/httpserver/spec/com/sun/net/httpserver/HttpsServer.html

I don't know if this class is available in icedtea ?

comment:5 Changed 7 years ago by Don-vip

Milestone: 14.03

comment:6 Changed 6 years ago by Don-vip

Resolution: fixed
Status: newclosed

In 6941/josm:

fix #9720 - Remote control: listen also in HTTPS

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain team.
as The resolution will be set.
The resolution will be deleted.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.