Modify

Opened 10 years ago

Closed 10 years ago

#9720 closed enhancement (fixed)

Remote control: listen also in HTTPS

Reported by: Don-vip Owned by: team
Priority: normal Milestone: 14.03
Component: Core remotecontrol Version:
Keywords: https Cc:

Description

From https://lists.openstreetmap.org/pipermail/talk/2014-February/069028.html:

it works by loading a localhost URL in a hidden frame but that is active content so will be blocked by modern browsers if loading http from https. So unless JOSM were to accept https connections to the remote control there isn't much we can do.

It's right, I have this error message from Chrome:

[blocked] The page at 'https://www.openstreetmap.org/#map=19/44.00013/12.58910' was loaded over HTTPS,
but ran insecure content from 'http://127.0.0.1:8111/load_and_zoom?left=12.586&top=44.001&right=12.591&bottom=43.999':
this content should also be loaded over HTTPS.

Attachments (0)

Change History (6)

comment:1 by stoecker, 10 years ago

Hmm, what cert do we want to provide?

comment:2 by stoecker, 10 years ago

Under Linux we could try to generate a local one when openssl is installed.

comment:3 by Don-vip, 10 years ago

It would be better to ship one. We could also generate it from Java but I fear it requires a JDK, not only a JRE.

comment:4 by Don-vip, 10 years ago

There's also the option of http://docs.oracle.com/javase/6/docs/jre/api/net/httpserver/spec/com/sun/net/httpserver/HttpsServer.html

I don't know if this class is available in icedtea ?

comment:5 by Don-vip, 10 years ago

Milestone: 14.03

comment:6 by Don-vip, 10 years ago

Resolution: fixed
Status: newclosed

In 6941/josm:

fix #9720 - Remote control: listen also in HTTPS

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain team.
as The resolution will be set.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment


E-mail address and name can be saved in the Preferences .
 
Note: See TracTickets for help on using tickets.