Opened 9 years ago
Closed 9 years ago
#9720 closed enhancement (fixed)
Remote control: listen also in HTTPS
| Reported by: | Don-vip | Owned by: | team |
|---|---|---|---|
| Priority: | normal | Milestone: | 14.03 |
| Component: | Core remotecontrol | Version: | |
| Keywords: | https | Cc: |
Description
From https://lists.openstreetmap.org/pipermail/talk/2014-February/069028.html:
it works by loading a localhost URL in a hidden frame but that is active content so will be blocked by modern browsers if loading http from https. So unless JOSM were to accept https connections to the remote control there isn't much we can do.
It's right, I have this error message from Chrome:
[blocked] The page at 'https://www.openstreetmap.org/#map=19/44.00013/12.58910' was loaded over HTTPS, but ran insecure content from 'http://127.0.0.1:8111/load_and_zoom?left=12.586&top=44.001&right=12.591&bottom=43.999': this content should also be loaded over HTTPS.
Attachments (0)
Change History (6)
comment:1 Changed 9 years ago by
comment:2 Changed 9 years ago by
Under Linux we could try to generate a local one when openssl is installed.
comment:3 Changed 9 years ago by
It would be better to ship one. We could also generate it from Java but I fear it requires a JDK, not only a JRE.
comment:4 Changed 9 years ago by
There's also the option of http://docs.oracle.com/javase/6/docs/jre/api/net/httpserver/spec/com/sun/net/httpserver/HttpsServer.html
I don't know if this class is available in icedtea ?
comment:5 Changed 9 years ago by
| Milestone: | → 14.03 |
|---|



Hmm, what cert do we want to provide?