Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
Yes. This is purely an SSL issue in regards to new TLS certificates (other cyptro methods were proven to be weak, so many sites/browsers aren't supporting them anymore). -Nick On Wed, Feb 4, 2015 at 11:08 AM, Alex Harui aha...@adobe.com wrote: Another question for you guys, since I don’t have any expertise in this area, would we in fact skirt around this by hitting http for more of our downloads instead of https? -Alex On 2/4/15, 8:05 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't.
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
However, we do need to verify that hitting HTTP doesn't cause too many redirects (possibly to HTTPS), as I seem to remember that redirects sometimes cause trouble for AIR and not to mention that we'd be back to square one if that would happen... EdB On Wed, Feb 4, 2015 at 5:12 PM, Erik de Bruin e...@ixsoftware.nl wrote: +1 here as well, especially since that would be an 'easyfix' ;-) EdB On Wed, Feb 4, 2015 at 5:11 PM, OmPrakash Muppirala bigosma...@gmail.com wrote: On Feb 4, 2015 8:09 AM, Alex Harui aha...@adobe.com wrote: Another question for you guys, since I don’t have any expertise in this area, would we in fact skirt around this by hitting http for more of our downloads instead of https? +1 to hitting http by default. Thanks, Om -Alex On 2/4/15, 8:05 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't. -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
On 2/4/15, 9:14 AM, OmPrakash Muppirala bigosma...@gmail.com wrote: On Feb 4, 2015 9:03 AM, Alex Harui aha...@adobe.com wrote: In another thread, I think Tom C says we should be using https to deliver all of our bits, which we aren’t today. What do folks think? -1. We are already doing MD5 checks on downloaded artifacts. I am not sure what benefit https is going to add here. It looks like we currently pull our MD5 files over https. So changing to pull the installer config files over http probably just means folks will get stuck on the MD5 fetch. Does changing the MD5 download to HTTP make it unsecure? -Alex
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
+1 here as well, especially since that would be an 'easyfix' ;-) EdB On Wed, Feb 4, 2015 at 5:11 PM, OmPrakash Muppirala bigosma...@gmail.com wrote: On Feb 4, 2015 8:09 AM, Alex Harui aha...@adobe.com wrote: Another question for you guys, since I don’t have any expertise in this area, would we in fact skirt around this by hitting http for more of our downloads instead of https? +1 to hitting http by default. Thanks, Om -Alex On 2/4/15, 8:05 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't. -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
In another thread, I think Tom C says we should be using https to deliver all of our bits, which we aren’t today. What do folks think? -Alex On 2/4/15, 8:37 AM, Alex Harui aha...@adobe.com wrote: I thought the change to http was going to be in the sdk-installer-config-4.0.xml file but it turns out it isn’t. When the artifact is coming from the mirrors, the Installer uses https to get MD5 and the apache-flex-sdk-installer-config.xml file. Should we use http to get the MD5s as well? If so, that is a simple change we can test in the nightly builds. -Alex On 2/4/15, 8:12 AM, Erik de Bruin e...@ixsoftware.nl wrote: +1 here as well, especially since that would be an 'easyfix' ;-) EdB On Wed, Feb 4, 2015 at 5:11 PM, OmPrakash Muppirala bigosma...@gmail.com wrote: On Feb 4, 2015 8:09 AM, Alex Harui aha...@adobe.com wrote: Another question for you guys, since I don’t have any expertise in this area, would we in fact skirt around this by hitting http for more of our downloads instead of https? +1 to hitting http by default. Thanks, Om -Alex On 2/4/15, 8:05 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't. -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
[Installer - FLEX-34687] Error #1009 encountered when changing languages on License Screen
If I could get some people to confirm that they do not get this error when changing the language while on the license screen I can mark it as fixed. This only applies to the v3.2 installer. JIRA Ticket and description https://issues.apache.org/jira/browse/FLEX-34687 Thanks Neil
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
In another thread, I think Tom C says we should be using https to deliver all of our bits, which we aren’t today. What do folks think? -1. We are already doing MD5 checks on downloaded artifacts. I am not sure what benefit https is going to add here. It looks like we currently pull our MD5 files over https. So changing to pull the installer config files over http probably just means folks will get stuck on the MD5 fetch. Does changing the MD5 download to HTTP make it unsecure? Only if you think a man-in-the-middle attack that hijacks both the download and the MD5 request is more likely than the bad guys having backdoor access to the servers actually hosting those files. And given the fact that those servers reside in the US and that Snowden's main revelation wasn't about a foreign power having access to nearly every bit in the US, I say we don't worry too much about it ;-) EdB -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
On Feb 4, 2015 8:09 AM, Alex Harui aha...@adobe.com wrote: Another question for you guys, since I don’t have any expertise in this area, would we in fact skirt around this by hitting http for more of our downloads instead of https? +1 to hitting http by default. Thanks, Om -Alex On 2/4/15, 8:05 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't.
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
Another question for you guys, since I don’t have any expertise in this area, would we in fact skirt around this by hitting http for more of our downloads instead of https? -Alex On 2/4/15, 8:05 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't.
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
On Feb 4, 2015 9:03 AM, Alex Harui aha...@adobe.com wrote: In another thread, I think Tom C says we should be using https to deliver all of our bits, which we aren’t today. What do folks think? -1. We are already doing MD5 checks on downloaded artifacts. I am not sure what benefit https is going to add here. Thanks, Om -Alex On 2/4/15, 8:37 AM, Alex Harui aha...@adobe.com wrote: I thought the change to http was going to be in the sdk-installer-config-4.0.xml file but it turns out it isn’t. When the artifact is coming from the mirrors, the Installer uses https to get MD5 and the apache-flex-sdk-installer-config.xml file. Should we use http to get the MD5s as well? If so, that is a simple change we can test in the nightly builds. -Alex On 2/4/15, 8:12 AM, Erik de Bruin e...@ixsoftware.nl wrote: +1 here as well, especially since that would be an 'easyfix' ;-) EdB On Wed, Feb 4, 2015 at 5:11 PM, OmPrakash Muppirala bigosma...@gmail.com wrote: On Feb 4, 2015 8:09 AM, Alex Harui aha...@adobe.com wrote: Another question for you guys, since I don’t have any expertise in this area, would we in fact skirt around this by hitting http for more of our downloads instead of https? +1 to hitting http by default. Thanks, Om -Alex On 2/4/15, 8:05 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't. -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
RE: [Installer - FLEX-34251] Is SSK needed for load installer config?
I just tried it out with v3.2 installer by changing the only place that actually calls an https other than one call to goog closure for FlexJS and I didn't get any errors during the install. I did see in the log file and Charles a couple other https urls. From the log Downloading 2.2.zip from: https://github.com/swfobject/swfobject/archive From Charles https://github.com:443 https://codeload.github.com:443 https://fonts.googleapis.com:443 https://fonts.gstatic.com:443 The quick fix is to change line 50 in 'MD5CompareUtil.as' from public static const MD5_DOMAIN:String = https://www.apache.org/dist/;; to public static const MD5_DOMAIN:String = http://www.apache.org/dist/;; This is definitely the easiest fix to apply if no one else has any problems with installing. Maybe the people that were having issues before could give that a try and let us know if that does indeed fix the issue. Neil -Original Message- From: Erik de Bruin [mailto:e...@ixsoftware.nl] Sent: February-04-15 9:13 AM To: dev@flex.apache.org Cc: Paul Hastings Subject: Re: [Installer - FLEX-34251] Is SSK needed for load installer config? +1 here as well, especially since that would be an 'easyfix' ;-) EdB On Wed, Feb 4, 2015 at 5:11 PM, OmPrakash Muppirala bigosma...@gmail.com wrote: On Feb 4, 2015 8:09 AM, Alex Harui aha...@adobe.com wrote: Another question for you guys, since I don't have any expertise in this area, would we in fact skirt around this by hitting http for more of our downloads instead of https? +1 to hitting http by default. Thanks, Om -Alex On 2/4/15, 8:05 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't. -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [DISCUSS] Release Apache Flex SDK Installer 3.2
Do we want want to put a halt to this release to fix https://issues.apache.org/jira/browse/FLEX-34251? On Wed, Feb 4, 2015 at 6:08 AM, Erik de Bruin e...@ixsoftware.nl wrote: Does this mean we can blame you on all the errors with your name on it :P? Indeed. I'm sacrificing my reputation as the 'never-ever-wrote-buggy-software-code-whisperer' for the greater good. People always feel better if they have someone else to blame :-P EdB -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [DISCUSS] Release Apache Flex SDK Installer 3.2
On 04/02/15 16:24, Nicholas Kwiatkowski wrote: Do we want want to put a halt to this release to fix https://issues.apache.org/jira/browse/FLEX-34251? Well, I'm not going to use Jira as a discussion platform, but no would be my view. Software updates must be delivered over secure channels. This goes doubles for compilers. If people on older versions of Windows have to go enable some settings to make that work, we can document and warn of that, as Alex suggested in the Is SSK needed for load installer config? (was: Re: sdk 4.14.0 100% install failures) thread. Tom
Re: [DISCUSS] Release Apache Flex SDK Installer 3.2
Why would we need to halt the release process? The 'less-RC' release process [1] has 3 phases, and we're currently still at the start of the first phase. I've made the LAST CALL, but clearly stated that I'll only cut the release branch when there's consensus on the ready-ness of the bits. EdB 1: https://cwiki.apache.org/confluence/display/FLEX/A+guide+to+the+Apache+Flex+release+process On Wed, Feb 4, 2015 at 5:24 PM, Nicholas Kwiatkowski nicho...@spoon.as wrote: Do we want want to put a halt to this release to fix https://issues.apache.org/jira/browse/FLEX-34251? On Wed, Feb 4, 2015 at 6:08 AM, Erik de Bruin e...@ixsoftware.nl wrote: Does this mean we can blame you on all the errors with your name on it :P? Indeed. I'm sacrificing my reputation as the 'never-ever-wrote-buggy-software-code-whisperer' for the greater good. People always feel better if they have someone else to blame :-P EdB -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: sdk 4.14.0 100% install failures
Good find! This issue matches the following JIRA issue: https://issues.apache.org/jira/browse/FLEX-34251 Please use that to work on this bug. I also changed the subject to make the reference more obvious ;-) EdB On Wed, Feb 4, 2015 at 9:55 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 6:36 AM, Justin Mclean wrote: Hi, I just tried it on windows, everything went fine without errors. IE8 (64 bit) on windows 7 failed to connect to the apache-flex-sdk-installer-config.xml URL, getting There is a problem with this website's security certificate.. error. i went into tools==advanced==security turned on TLS 1.1 TLS 1.2. IE8 could connect ok after that. next tried the installer again holy crap worked ok first time. this is disturbing at a couple of levels. - i suppose IE is as good a choice as any to pick up internet options for consumer apps but for devs its kind of out in left field. is this documented anyplace? if not, somebody should probably spread the word. - the folks who accounted for the 93% windows successful installs need to turn in their nerd cards for having a working IE browser ;-) -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: sdk 4.14.0 100% install failures
On 2/4/2015 6:36 AM, Justin Mclean wrote: Hi, I just tried it on windows, everything went fine without errors. IE8 (64 bit) on windows 7 failed to connect to the apache-flex-sdk-installer-config.xml URL, getting There is a problem with this website's security certificate.. error. i went into tools==advanced==security turned on TLS 1.1 TLS 1.2. IE8 could connect ok after that. next tried the installer again holy crap worked ok first time. this is disturbing at a couple of levels. - i suppose IE is as good a choice as any to pick up internet options for consumer apps but for devs its kind of out in left field. is this documented anyplace? if not, somebody should probably spread the word. - the folks who accounted for the 93% windows successful installs need to turn in their nerd cards for having a working IE browser ;-)
Re: [LAST CALL] Apache Flex SDK Installer 3.2
This is using the 'nightly' build? If so, I believe the solution is to uninstall the release version first and then install the nightly. The nightly is build with a different certificate than the release version, hence the conflict. EdB On Wed, Feb 4, 2015 at 10:33 AM, Maxim Solodovnik solomax...@gmail.com wrote: I got following error while trying to install: The application cannot be installed due to a certificate problem. The certificate does not match the installed application certificate, does not support application upgrades, or is invalid. Please contact the application author. Is there any known workaround? Windows 10x64 TP On Wed, Feb 4, 2015 at 2:56 PM, Erik de Bruin e...@ixsoftware.nl wrote: Please check if the Installer issue you're working on is in the JIRA list. If it's not, please add it. If it is, can you please refer to the JIRA issue in the subject of the email thread, for easy reference? Like so: [Installer - FLEX-34540] Error installing previous versions Thanks, EdB On Wed, Feb 4, 2015 at 9:52 AM, Erik de Bruin e...@ixsoftware.nl wrote: Hi all, This is the official 'last call' for any and all features, fixes and other changes (legal docs?) that need to be made to the Installer to get it ready to release. Everyone (who has access to a Windows machine), please help out by checking the current nightly build [1] for stability and regression issues. Let's use the DISCUSS thread and JIRA [2] to keep track of open issues and try to get a solid release ready. I'll cut the release branch as soon as there seems to be a consensus that the state of the code in the develop branch is 'as good as it gets' ;-) Thanks, EdB 1: http://apacheflexbuild.cloudapp.net:8080/job/flex-utilities_installer/lastSuccessfulBuild/artifact/installer/release 2: https://issues.apache.org/jira/browse/FLEX-34734 -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl -- WBR Maxim aka solomax -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [LAST CALL] Apache Flex SDK Installer 3.2
I got following error while trying to install: The application cannot be installed due to a certificate problem. The certificate does not match the installed application certificate, does not support application upgrades, or is invalid. Please contact the application author. Is there any known workaround? Windows 10x64 TP On Wed, Feb 4, 2015 at 2:56 PM, Erik de Bruin e...@ixsoftware.nl wrote: Please check if the Installer issue you're working on is in the JIRA list. If it's not, please add it. If it is, can you please refer to the JIRA issue in the subject of the email thread, for easy reference? Like so: [Installer - FLEX-34540] Error installing previous versions Thanks, EdB On Wed, Feb 4, 2015 at 9:52 AM, Erik de Bruin e...@ixsoftware.nl wrote: Hi all, This is the official 'last call' for any and all features, fixes and other changes (legal docs?) that need to be made to the Installer to get it ready to release. Everyone (who has access to a Windows machine), please help out by checking the current nightly build [1] for stability and regression issues. Let's use the DISCUSS thread and JIRA [2] to keep track of open issues and try to get a solid release ready. I'll cut the release branch as soon as there seems to be a consensus that the state of the code in the develop branch is 'as good as it gets' ;-) Thanks, EdB 1: http://apacheflexbuild.cloudapp.net:8080/job/flex-utilities_installer/lastSuccessfulBuild/artifact/installer/release 2: https://issues.apache.org/jira/browse/FLEX-34734 -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl -- WBR Maxim aka solomax
Re: [LAST CALL] Apache Flex SDK Installer 3.2
Thanks a lot! Uninstall helps! On Wed, Feb 4, 2015 at 3:42 PM, Erik de Bruin e...@ixsoftware.nl wrote: This is using the 'nightly' build? If so, I believe the solution is to uninstall the release version first and then install the nightly. The nightly is build with a different certificate than the release version, hence the conflict. EdB On Wed, Feb 4, 2015 at 10:33 AM, Maxim Solodovnik solomax...@gmail.com wrote: I got following error while trying to install: The application cannot be installed due to a certificate problem. The certificate does not match the installed application certificate, does not support application upgrades, or is invalid. Please contact the application author. Is there any known workaround? Windows 10x64 TP On Wed, Feb 4, 2015 at 2:56 PM, Erik de Bruin e...@ixsoftware.nl wrote: Please check if the Installer issue you're working on is in the JIRA list. If it's not, please add it. If it is, can you please refer to the JIRA issue in the subject of the email thread, for easy reference? Like so: [Installer - FLEX-34540] Error installing previous versions Thanks, EdB On Wed, Feb 4, 2015 at 9:52 AM, Erik de Bruin e...@ixsoftware.nl wrote: Hi all, This is the official 'last call' for any and all features, fixes and other changes (legal docs?) that need to be made to the Installer to get it ready to release. Everyone (who has access to a Windows machine), please help out by checking the current nightly build [1] for stability and regression issues. Let's use the DISCUSS thread and JIRA [2] to keep track of open issues and try to get a solid release ready. I'll cut the release branch as soon as there seems to be a consensus that the state of the code in the develop branch is 'as good as it gets' ;-) Thanks, EdB 1: http://apacheflexbuild.cloudapp.net:8080/job/flex-utilities_installer/lastSuccessfulBuild/artifact/installer/release 2: https://issues.apache.org/jira/browse/FLEX-34734 -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl -- WBR Maxim aka solomax -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl -- WBR Maxim aka solomax
[LAST CALL] Apache Flex SDK Installer 3.2
Hi all, This is the official 'last call' for any and all features, fixes and other changes (legal docs?) that need to be made to the Installer to get it ready to release. Everyone (who has access to a Windows machine), please help out by checking the current nightly build [1] for stability and regression issues. Let's use the DISCUSS thread and JIRA [2] to keep track of open issues and try to get a solid release ready. I'll cut the release branch as soon as there seems to be a consensus that the state of the code in the develop branch is 'as good as it gets' ;-) Thanks, EdB 1: http://apacheflexbuild.cloudapp.net:8080/job/flex-utilities_installer/lastSuccessfulBuild/artifact/installer/release 2: https://issues.apache.org/jira/browse/FLEX-34734 -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
[Installer - FLEX-34251] Is SSK needed for load installer config? (was: Re: sdk 4.14.0 100% install failures)
Please continue discussion on this issue in this thread. Thanks, EdB On Wed, Feb 4, 2015 at 10:06 AM, Erik de Bruin e...@ixsoftware.nl wrote: Good find! This issue matches the following JIRA issue: https://issues.apache.org/jira/browse/FLEX-34251 Please use that to work on this bug. I also changed the subject to make the reference more obvious ;-) EdB On Wed, Feb 4, 2015 at 9:55 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 6:36 AM, Justin Mclean wrote: Hi, I just tried it on windows, everything went fine without errors. IE8 (64 bit) on windows 7 failed to connect to the apache-flex-sdk-installer-config.xml URL, getting There is a problem with this website's security certificate.. error. i went into tools==advanced==security turned on TLS 1.1 TLS 1.2. IE8 could connect ok after that. next tried the installer again holy crap worked ok first time. this is disturbing at a couple of levels. - i suppose IE is as good a choice as any to pick up internet options for consumer apps but for devs its kind of out in left field. is this documented anyplace? if not, somebody should probably spread the word. - the folks who accounted for the 93% windows successful installs need to turn in their nerd cards for having a working IE browser ;-) -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
An option we could use is to try https first. If it fails, present the user to drop down to http. This should take care of all use cases, yet still allow the user control the security level... -Nick On Wed, Feb 4, 2015 at 12:02 PM, Alex Harui aha...@adobe.com wrote: In another thread, I think Tom C says we should be using https to deliver all of our bits, which we aren’t today. What do folks think? -Alex On 2/4/15, 8:37 AM, Alex Harui aha...@adobe.com wrote: I thought the change to http was going to be in the sdk-installer-config-4.0.xml file but it turns out it isn’t. When the artifact is coming from the mirrors, the Installer uses https to get MD5 and the apache-flex-sdk-installer-config.xml file. Should we use http to get the MD5s as well? If so, that is a simple change we can test in the nightly builds. -Alex On 2/4/15, 8:12 AM, Erik de Bruin e...@ixsoftware.nl wrote: +1 here as well, especially since that would be an 'easyfix' ;-) EdB On Wed, Feb 4, 2015 at 5:11 PM, OmPrakash Muppirala bigosma...@gmail.com wrote: On Feb 4, 2015 8:09 AM, Alex Harui aha...@adobe.com wrote: Another question for you guys, since I don’t have any expertise in this area, would we in fact skirt around this by hitting http for more of our downloads instead of https? +1 to hitting http by default. Thanks, Om -Alex On 2/4/15, 8:05 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't. -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
TLF additions documentation?
Hey all, very excited that TLF has some support for tables, but I'm not sure where to find any documentation on this feature. Can you guys help me out there? If I understand correctly, there is also currently no additions to the export/import of FXML supporting the table additions? Any pointers on where I can look at in the source to add support for this as our team adds this feature into Dedoose? Thanks again for all you're great work. ~ JT
Re: TLF additions documentation?
Hi Jason, I’ve been a bit remiss in documenting it. Here’s my noted that I was keeping while working on this: https://docs.google.com/document/d/1sT0IAiMfIOBVgmo8wwF6ZZviuNFcW2bUfQoj0zDmSog/edit# Here’s a small app I was using while developing. It should give you an idea how to use the APIs. http://pastebin.com/dytnv32a Until we have proper docs, feel free to ask questions… Harbs On Feb 4, 2015, at 9:29 PM, Jason Taylor ja...@dedoose.com wrote: Hey all, very excited that TLF has some support for tables, but I'm not sure where to find any documentation on this feature. Can you guys help me out there? If I understand correctly, there is also currently no additions to the export/import of FXML supporting the table additions? Any pointers on where I can look at in the source to add support for this as our team adds this feature into Dedoose? Thanks again for all you're great work. ~ JT
Re: TLF additions documentation?
It would be great if you or Jude can create a basic wiki page from these two documents. Thanks, Om On Wed, Feb 4, 2015 at 12:44 PM, Harbs harbs.li...@gmail.com wrote: Hi Jason, I’ve been a bit remiss in documenting it. Here’s my noted that I was keeping while working on this: https://docs.google.com/document/d/1sT0IAiMfIOBVgmo8wwF6ZZviuNFcW2bUfQoj0zDmSog/edit# Here’s a small app I was using while developing. It should give you an idea how to use the APIs. http://pastebin.com/dytnv32a Until we have proper docs, feel free to ask questions… Harbs On Feb 4, 2015, at 9:29 PM, Jason Taylor ja...@dedoose.com wrote: Hey all, very excited that TLF has some support for tables, but I'm not sure where to find any documentation on this feature. Can you guys help me out there? If I understand correctly, there is also currently no additions to the export/import of FXML supporting the table additions? Any pointers on where I can look at in the source to add support for this as our team adds this feature into Dedoose? Thanks again for all you're great work. ~ JT
Re: [Installer - FLEX-34251] Is SSK needed for load installer config? (was: Re: sdk 4.14.0 100% install failures)
Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. -Nick On Wed, Feb 4, 2015 at 10:30 AM, Tom Chiverton t...@extravision.com wrote: On 04/02/15 15:23, Alex Harui wrote: I wonder if on Windows, the Installer should pop an alert when finding a download error and suggest that folks use Internet Explorer to hit the failing download. At the very least, it'll provide an immediate data point if they report it, and may aid people in self-diagnosing the issue. TLS 1.x is fast becoming mandatory for SSL connections. This page http://blogs.msdn.com/b/kaushal/archive/2011/10/02/ support-for-ssl-tls-protocols-on-windows.aspx has a chart showing TLS support by O/S, and indicates Windows 7 should support it, I assume by default. Tom
Re: sdk 4.14.0 100% install failures
On 2/4/2015 10:46 PM, Nicholas Kwiatkowski wrote: What is actually happening under the hood is that IE propagates those security settings down to the OS level. If you use any of the native DLLs to make HTTP/HTTPS calls, they will use settings set in IE (the same goes for Windows Update, any .NET app, etc). This has been the case since Windows 98 and 2000 SP1. good to know. but this occurred on a windows 7 box none of those security settings were turned on by default. I'm surprised that the SSL setting in IE hasn't bit you earlier with another app... but apparently you aren't alone ;P nobody here uses IE at all. our biggest clients are locked away in MS's dungeon so i guess they're all up-to-date. we have to test this sort of stuff on their network using their boxes, so never seen before.
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
On 2/4/2015 10:30 PM, Tom Chiverton wrote: TLS 1.x is fast becoming mandatory for SSL connections. This page http://blogs.msdn.com/b/kaushal/archive/2011/10/02/support-for-ssl-tls-protocols-on-windows.aspx has a chart showing TLS support by O/S, and indicates Windows 7 should support it, I assume by default. while it may support those options, they aren't turned on by default. if you take a look at the image Supported SSL protocols under “Advanced” tab of IE 9 on Windows 7 from that article you'll what i saw when i fixed this. 1.1 1.2 were turned off.
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't.
Re: sdk 4.14.0 100% install failures
Hi, Please use the new thread (with the JIRA reference) so we keep all information together. Thanks, EdB On Wed, Feb 4, 2015 at 4:59 PM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:46 PM, Nicholas Kwiatkowski wrote: What is actually happening under the hood is that IE propagates those security settings down to the OS level. If you use any of the native DLLs to make HTTP/HTTPS calls, they will use settings set in IE (the same goes for Windows Update, any .NET app, etc). This has been the case since Windows 98 and 2000 SP1. good to know. but this occurred on a windows 7 box none of those security settings were turned on by default. I'm surprised that the SSL setting in IE hasn't bit you earlier with another app... but apparently you aren't alone ;P nobody here uses IE at all. our biggest clients are locked away in MS's dungeon so i guess they're all up-to-date. we have to test this sort of stuff on their network using their boxes, so never seen before. -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: Tour de Flex stats - 10,000 views
Hi, In Tour de Flex 1.2 Spark Framework Components Visual Components Graphics and FXG the third item in the tree is Eclipse when it should be Ellipse. Fixed and will show up in the next release. And just for interest TourDeFlex now has had 35,000 views and 3,500 downloads. Thanks, Justin
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
Sounds reasonable. The AIR downloading code via URLLoader just seems sensitive. Do we know if we use AIR sockets and build our own http download protocol on top if it will bypass the IE libraries underneath? -Alex On 2/4/15, 11:03 AM, Nicholas Kwiatkowski nicho...@spoon.as wrote: An option we could use is to try https first. If it fails, present the user to drop down to http. This should take care of all use cases, yet still allow the user control the security level... -Nick On Wed, Feb 4, 2015 at 12:02 PM, Alex Harui aha...@adobe.com wrote: In another thread, I think Tom C says we should be using https to deliver all of our bits, which we aren’t today. What do folks think? -Alex On 2/4/15, 8:37 AM, Alex Harui aha...@adobe.com wrote: I thought the change to http was going to be in the sdk-installer-config-4.0.xml file but it turns out it isn’t. When the artifact is coming from the mirrors, the Installer uses https to get MD5 and the apache-flex-sdk-installer-config.xml file. Should we use http to get the MD5s as well? If so, that is a simple change we can test in the nightly builds. -Alex On 2/4/15, 8:12 AM, Erik de Bruin e...@ixsoftware.nl wrote: +1 here as well, especially since that would be an 'easyfix' ;-) EdB On Wed, Feb 4, 2015 at 5:11 PM, OmPrakash Muppirala bigosma...@gmail.com wrote: On Feb 4, 2015 8:09 AM, Alex Harui aha...@adobe.com wrote: Another question for you guys, since I don’t have any expertise in this area, would we in fact skirt around this by hitting http for more of our downloads instead of https? +1 to hitting http by default. Thanks, Om -Alex On 2/4/15, 8:05 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't. -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
AIR/FP 17 beta are out
Hi, I've just added them to the installer config but probably did something wrong as I'm getting this: Version 3.1.0 (mac) Using Locale: en_AU Fetched the SDK download mirror URL from the CGI. AIR version 17.0 Flash Player version 17.0 Creating Apache Flex home Creating temporary directory Downloading Apache Flex SDK from: http://apache.mirror.digitalpacific.com.au/flex/4.14.0/binaries/apache-flex-sdk-4.14.0-bin.tar.gz Verifying Apache Flex SDK MD5 Signature The Apache Flex SDK MD5 Signature of the downloaded files matches the reference. The file is valid. Unzipping: /Users/justinmclean/Documents/ApachFlexTestII/temp/apache-flex-sdk-4.14.0-bin.tar.gz Finished unzipping: /Users/justinmclean/Documents/ApachFlexTestII/temp/apache-flex-sdk-4.14.0-bin.tar.gz Error #1009 Aborting Installation The MD5 are correct (I think) - any ideas what the issue is? Also can we actually document how to generate the cache IDs/add new players etc it seem to have grrown more complex as time has gone on. Thanks, Justin
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
On Feb 4, 2015 5:33 PM, Alex Harui aha...@adobe.com wrote: Sounds reasonable. The AIR downloading code via URLLoader just seems sensitive. Do we know if we use AIR sockets and build our own http download protocol on top if it will bypass the IE libraries underneath? Yes, it will. I use the as3httpclient in my projects and it should work fine and bypass any browser based settings. Thanks, Om -Alex On 2/4/15, 11:03 AM, Nicholas Kwiatkowski nicho...@spoon.as wrote: An option we could use is to try https first. If it fails, present the user to drop down to http. This should take care of all use cases, yet still allow the user control the security level... -Nick On Wed, Feb 4, 2015 at 12:02 PM, Alex Harui aha...@adobe.com wrote: In another thread, I think Tom C says we should be using https to deliver all of our bits, which we aren’t today. What do folks think? -Alex On 2/4/15, 8:37 AM, Alex Harui aha...@adobe.com wrote: I thought the change to http was going to be in the sdk-installer-config-4.0.xml file but it turns out it isn’t. When the artifact is coming from the mirrors, the Installer uses https to get MD5 and the apache-flex-sdk-installer-config.xml file. Should we use http to get the MD5s as well? If so, that is a simple change we can test in the nightly builds. -Alex On 2/4/15, 8:12 AM, Erik de Bruin e...@ixsoftware.nl wrote: +1 here as well, especially since that would be an 'easyfix' ;-) EdB On Wed, Feb 4, 2015 at 5:11 PM, OmPrakash Muppirala bigosma...@gmail.com wrote: On Feb 4, 2015 8:09 AM, Alex Harui aha...@adobe.com wrote: Another question for you guys, since I don’t have any expertise in this area, would we in fact skirt around this by hitting http for more of our downloads instead of https? +1 to hitting http by default. Thanks, Om -Alex On 2/4/15, 8:05 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 10:52 PM, Nicholas Kwiatkowski wrote: Anything Vista+/Mac OS10.4+ has TLS turned on by default. It was made available in XP, if you turned it on. 1.0 was on by default, 1.1 1.2 (guess the culprit here) weren't. -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
On 2/4/15, 11:41 PM, piotrz piotrzarzyck...@gmail.com wrote: Hi Om, Alex, So can we just use this library ? Any license objections ? Or it is too big and better write our own logic ? Looks like it is MIT license so ok to use. -Alex
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
Hi Om, Alex, So can we just use this library ? Any license objections ? Or it is too big and better write our own logic ? Om, This is right link, because I see couple of links in google: https://code.google.com/p/as3httpclient/ Piotr - Apache Flex PMC piotrzarzyck...@gmail.com -- View this message in context: http://apache-flex-development.247.n4.nabble.com/Installer-FLEX-34251-Is-SSK-needed-for-load-installer-config-was-Re-sdk-4-14-0-100-install-failures-tp44913p44955.html Sent from the Apache Flex Development mailing list archive at Nabble.com.
Re: [Installer - FLEX-34251] Is SSK needed for load installer config?
On 2/4/15, 6:12 PM, OmPrakash Muppirala bigosma...@gmail.com wrote: On Feb 4, 2015 5:33 PM, Alex Harui aha...@adobe.com wrote: Sounds reasonable. The AIR downloading code via URLLoader just seems sensitive. Do we know if we use AIR sockets and build our own http download protocol on top if it will bypass the IE libraries underneath? Yes, it will. I use the as3httpclient in my projects and it should work fine and bypass any browser based settings. Any volunteers to try this out? It would be a big deal if it made a noticeable dent in the number of failed installs. -Alex
RE: [DISCUSS] Release Apache Flex SDK Installer 3.2
hahaha :) Mark, That's why we haven't had any other volunteers for this job. :D Erik is taking it great. :) Piotr - Apache Flex PMC piotrzarzyck...@gmail.com -- View this message in context: http://apache-flex-development.247.n4.nabble.com/DISCUSS-Release-Apache-Flex-SDK-Installer-3-2-tp44853p44918.html Sent from the Apache Flex Development mailing list archive at Nabble.com.
RE: [DISCUSS] Release Apache Flex SDK Installer 3.2
Does this mean we can blame you on all the errors with your name on it :P? -Mark -Original Message- From: Erik de Bruin [mailto:e...@ixsoftware.nl] Sent: Tuesday, February 03, 2015 11:19 AM To: dev@flex.apache.org Subject: Re: [DISCUSS] Release Apache Flex SDK Installer 3.2 Sorry Eric, I wish I could do it but I'm not skilled enough :( Not really any skills required, just a masochistic desire to have your account name show up in the stack trace :-P EdB -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [DISCUSS] Release Apache Flex SDK Installer 3.2
Does this mean we can blame you on all the errors with your name on it :P? Indeed. I'm sacrificing my reputation as the 'never-ever-wrote-buggy-software-code-whisperer' for the greater good. People always feel better if they have someone else to blame :-P EdB -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [Installer - FLEX-34251] Is SSK needed for load installer config? (was: Re: sdk 4.14.0 100% install failures)
The IE 'internet options' are actually the Windows internet options, it's a left over from when IE was illegally tied to Windows. The question is what are the default settings there - if the defaults are for those options to be on we don't need to worry ? Tom On 04/02/15 09:08, Erik de Bruin wrote: Please continue discussion on this issue in this thread. Thanks, EdB On Wed, Feb 4, 2015 at 10:06 AM, Erik de Bruin e...@ixsoftware.nl wrote: Good find! This issue matches the following JIRA issue: https://issues.apache.org/jira/browse/FLEX-34251 Please use that to work on this bug. I also changed the subject to make the reference more obvious ;-) EdB On Wed, Feb 4, 2015 at 9:55 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 6:36 AM, Justin Mclean wrote: Hi, I just tried it on windows, everything went fine without errors. IE8 (64 bit) on windows 7 failed to connect to the apache-flex-sdk-installer-config.xml URL, getting There is a problem with this website's security certificate.. error. i went into tools==advanced==security turned on TLS 1.1 TLS 1.2. IE8 could connect ok after that. next tried the installer again holy crap worked ok first time. this is disturbing at a couple of levels. - i suppose IE is as good a choice as any to pick up internet options for consumer apps but for devs its kind of out in left field. is this documented anyplace? if not, somebody should probably spread the word. - the folks who accounted for the 93% windows successful installs need to turn in their nerd cards for having a working IE browser ;-) -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [Installer - FLEX-34251] Is SSK needed for load installer config? (was: Re: sdk 4.14.0 100% install failures)
Hi Paul, Thanks for finding that. I wonder if on Windows, the Installer should pop an alert when finding a download error and suggest that folks use Internet Explorer to hit the failing download. Thoughts? -Alex On 2/4/15, 1:08 AM, Erik de Bruin e...@ixsoftware.nl wrote: Please continue discussion on this issue in this thread. Thanks, EdB On Wed, Feb 4, 2015 at 10:06 AM, Erik de Bruin e...@ixsoftware.nl wrote: Good find! This issue matches the following JIRA issue: https://issues.apache.org/jira/browse/FLEX-34251 Please use that to work on this bug. I also changed the subject to make the reference more obvious ;-) EdB On Wed, Feb 4, 2015 at 9:55 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 6:36 AM, Justin Mclean wrote: Hi, I just tried it on windows, everything went fine without errors. IE8 (64 bit) on windows 7 failed to connect to the apache-flex-sdk-installer-config.xml URL, getting There is a problem with this website's security certificate.. error. i went into tools==advanced==security turned on TLS 1.1 TLS 1.2. IE8 could connect ok after that. next tried the installer again holy crap worked ok first time. this is disturbing at a couple of levels. - i suppose IE is as good a choice as any to pick up internet options for consumer apps but for devs its kind of out in left field. is this documented anyplace? if not, somebody should probably spread the word. - the folks who accounted for the 93% windows successful installs need to turn in their nerd cards for having a working IE browser ;-) -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl -- Ix Multimedia Software Jan Luykenstraat 27 3521 VB Utrecht T. 06-51952295 I. www.ixsoftware.nl
Re: [Installer - FLEX-34251] Is SSK needed for load installer config? (was: Re: sdk 4.14.0 100% install failures)
On 04/02/15 15:23, Alex Harui wrote: I wonder if on Windows, the Installer should pop an alert when finding a download error and suggest that folks use Internet Explorer to hit the failing download. At the very least, it'll provide an immediate data point if they report it, and may aid people in self-diagnosing the issue. TLS 1.x is fast becoming mandatory for SSL connections. This page http://blogs.msdn.com/b/kaushal/archive/2011/10/02/support-for-ssl-tls-protocols-on-windows.aspx has a chart showing TLS support by O/S, and indicates Windows 7 should support it, I assume by default. Tom
Re: sdk 4.14.0 100% install failures
What is actually happening under the hood is that IE propagates those security settings down to the OS level. If you use any of the native DLLs to make HTTP/HTTPS calls, they will use settings set in IE (the same goes for Windows Update, any .NET app, etc). This has been the case since Windows 98 and 2000 SP1. Obviously newer versions of IE (installed by default in W7 and via service packs in Vista) have the TLS settings turned on by default. That is why you are seeing a majority have success with this. I'm surprised that the SSL setting in IE hasn't bit you earlier with another app... but apparently you aren't alone ;P -Nick On Wed, Feb 4, 2015 at 3:55 AM, Paul Hastings paul.hasti...@gmail.com wrote: On 2/4/2015 6:36 AM, Justin Mclean wrote: Hi, I just tried it on windows, everything went fine without errors. IE8 (64 bit) on windows 7 failed to connect to the apache-flex-sdk-installer-config.xml URL, getting There is a problem with this website's security certificate.. error. i went into tools==advanced==security turned on TLS 1.1 TLS 1.2. IE8 could connect ok after that. next tried the installer again holy crap worked ok first time. this is disturbing at a couple of levels. - i suppose IE is as good a choice as any to pick up internet options for consumer apps but for devs its kind of out in left field. is this documented anyplace? if not, somebody should probably spread the word. - the folks who accounted for the 93% windows successful installs need to turn in their nerd cards for having a working IE browser ;-)
Re: [LAST CALL] Apache Flex SDK Installer 3.2
HI, Over the last few day we've had over 1600 attempts to install the SDK around 900 have been successful. The error rate for windows was 51% (ie more failed than worked). The error rate for OSX was only 15%. Perhaps the AIR/IE issue is causing more errors than just the config file one? Errors that account for more than 5% of all downloads include: 1. Unable to create temporary directory (10% on windows) 2. OSMF failed to download (7% on windows and 1% on mac) 3. 2032 error (7% on windows and 2% on mac) 4. aglj40.jar failed to download (5% on windows) 5. config file error (5% on windows) That about 80% of all errors, so fixing these would greatly reduce the installer error rate and improve user experience. Would be look to look at this for this release. I believe: 1. Has been fixed (but no fully tested) in 3.2, 2. Could be addressed by bundling OSMF in the SDK binary (it MPL so that's possible) or perhaps finding alternative place to obtain it from? Bundling it would require minor license/notice change and minor build process change in the SDK. Probably worth considering. 3. Not addressed yet but raised see [1] 4. Can't be bundled / can't host elsewhere without Adobe permission so that's an issue. Any ideas? 5. Cause is now know see [2], just when you thought you didn't need to worry about IE again :-) Thanks, Justin 1. https://issues.apache.org/jira/browse/FLEX-34256 2.https://issues.apache.org/jira/browse/FLEX-34251
