ColdFusion 8, FlashForms and SSL dilemma

2012-01-25 Thread DURETTE, STEVEN J

Hi all,

I have been directed to change a few of the sites that I maintain to HTTPS. So 
far everything is working great, but I have a few sites where the developer 
used flash forms extensively. These sites will bring up the flash form, but all 
of the functionality is disabled.  For example a user must choose a state, then 
the rest of the form is dynamically created and populated. When https is used, 
changing the state does nothing.

I have already googled, and made the suggested changes to remoting-config.xml 
and services-config.xml, but it still didn't work. Plus those suggestions were 
for using flex with cf, not flash forms.

I really need to get this working, and no I cannot rewrite this to get rid of 
the flash forms as much as I want to. This application is nearing end of life 
and I don't have the time to re-write it, but our security organization is 
requiring SSL.

I have already tried these sites for info:
http://www.cftips.net/post.cfm/flex-remoteobject-remoting-over-ssl
http://www.barneyb.com/barneyblog/2007/09/01/flex2-and-3-remoteobjects-over-ssl-with-coldfusion/
http://blog.crankybit.com/flex-remoting-over-ssl/

Thanks,
Steve


__

Steve Durette

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:349622
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: ColdFusion 8, FlashForms and SSL dilemma

2012-01-25 Thread J.J. Merrick

Steven,


Have you run Firebug to see what calls are being made from the flash
form? It could be trying to hit something that is non-SSL. The NET tab
should give you some indication. That is where I would start and then
work my way up.


-J.J.

On Wed, Jan 25, 2012 at 8:25 AM, DURETTE, STEVEN J sd1...@att.com wrote:

 Hi all,

 I have been directed to change a few of the sites that I maintain to HTTPS. 
 So far everything is working great, but I have a few sites where the 
 developer used flash forms extensively. These sites will bring up the flash 
 form, but all of the functionality is disabled.  For example a user must 
 choose a state, then the rest of the form is dynamically created and 
 populated. When https is used, changing the state does nothing.

 I have already googled, and made the suggested changes to remoting-config.xml 
 and services-config.xml, but it still didn't work. Plus those suggestions 
 were for using flex with cf, not flash forms.

 I really need to get this working, and no I cannot rewrite this to get rid of 
 the flash forms as much as I want to. This application is nearing end of life 
 and I don't have the time to re-write it, but our security organization is 
 requiring SSL.

 I have already tried these sites for info:
 http://www.cftips.net/post.cfm/flex-remoteobject-remoting-over-ssl
 http://www.barneyb.com/barneyblog/2007/09/01/flex2-and-3-remoteobjects-over-ssl-with-coldfusion/
 http://blog.crankybit.com/flex-remoting-over-ssl/

 Thanks,
 Steve


 __

 Steve Durette

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:349625
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: ColdFusion 8, FlashForms and SSL dilemma (solved)

2012-01-25 Thread DURETTE, STEVEN J

I found the problem... It had to deal with IE8 only. IE 8 can't receive caching 
headers when dealing with cgi.content_type = application/x-amf. Everything I 
found on the web stated that it dealt with the pragma caching value only but 
removing that didn't work. I then decided to check if it was application/x-amf 
and I coded a cfif that wouldn't send any of the caching headers. That fixed it.

Original code:
cfset gmt = gettimezoneinfo() /
cfset gmt = gmt.utchouroffset /
cfif not gmt
   cfset gmt =  /
cfelseif gmt
   cfset gmt = +  gmt 
/cfif
/cfsilent
cfheader name=Pragma value=no-cache /
cfheader name=Cache-Control value=no-cache, must-revalidate /
cfheader name=Expires value=Mon, 26 Jul 1997 05:00:00 GMT /
cfheader name=Last-Modified value=#DateFormat(now(), 'ddd, dd mmm ')# 
#TimeFormat(now(), 'HH:mm:ss')# GMT#gmt# /

New Code:
cfset gmt = gettimezoneinfo() /
cfset gmt = gmt.utchouroffset /
cfif not gmt
   cfset gmt =  /
cfelseif gmt
   cfset gmt = +  gmt 
/cfif
/cfsilent
cfif cgi.content_type neq application/x-amf
cfheader name=Pragma value=no-cache /
cfheader name=Cache-Control value=no-cache, must-revalidate /
cfheader name=Expires value=Mon, 26 Jul 1997 05:00:00 GMT /
/cfif
cfheader name=Last-Modified value=#DateFormat(now(), 'ddd, dd mmm ')# 
#TimeFormat(now(), 'HH:mm:ss')# GMT#gmt# /

Thanks for the suggestion though I wouldn't have thought of checking the net 
tab in firebug.

Steve

-Original Message-
From: J.J. Merrick [mailto:j...@panos.cc] 
Sent: Wednesday, January 25, 2012 1:32 PM
To: cf-talk
Subject: Re: ColdFusion 8, FlashForms and SSL dilemma


Steven,


Have you run Firebug to see what calls are being made from the flash
form? It could be trying to hit something that is non-SSL. The NET tab
should give you some indication. That is where I would start and then
work my way up.


-J.J.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:349626
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm