ActionScript 3.0 :: Does Flash Web Services Allows Https:// Over HTTP
Jun 17, 2009Does flash web services allows https:// over http ?
View 5 RepliesDoes flash web services allows https:// over http ?
View 5 RepliesI am finding that if I load Flash from a HTTPS page [URL] and try to make a request within ActionScript 3 to [URL] the request does not go through. Same goes for the opposite (accessing https from a http-loaded flash script).
The request is failing, the requested data (passed from a PHP script) is not loading.
Now at first I assumed the trouble was with cross-domain policy files, but I have fixed that issue (I think).
Is there any security policy in Flash (CS5 btw) on HTTP vs HTTPS requests based on where the script is loaded from?
I'm having a very strange problem around a few services I developed for AMFPHP that worked fine over HTTP but once over HTTPS gone completely wrong. When testing right on export flash IDE the connection goes fine but when online and on the browser it doesn't. On connecting, Flash returns a security sandbox violation like this:
"Error #2048: Security sandbox violation:[URL] cannot load data from [URL]. I know that I'm missing the "www" subdomain on the gateway secure address but this is has another purpose for domain configuration. What's most weird is that even the Service Browser went completely wrong since it tries to open the gateway through the HTTP version of the address instead of the HTTPS one. Upon opening the browser I get a "NetConnection.Call.Failed: HTTP: Failed" error. It also tells me that it's trying to connect to [URL] instead of [URL].
I have a Flash Movie (SWF) that is consuming a .NET WebService (located on the same domain) and in my Test environment everything works perfectly (Test env is all HTTP).
When deployed to production (All HTTPS) an issue occurs when trying to access the WebService from the Flash movie.
A new WebService object is created with the HTTPS url passed to it.
myWS = new WebService("https://mydomain/path/to/webservice")
As I watch the HTTP traffic in FireBug I can see the Flash movie making a POST request (passing along the SOAP data) as HTTP (not HTTPS as I would expect). This HTTP requests hits the firewall which forces a 302 Redirect to HTTPS. After this redirect occurs, Flash/Firefox re-sends the request to the HTTPS version of the URL, but as a GET request (thus losing all the SOAP data and making the call to the WebService invalid).
I am trying to figure out how/why a Flash WebService would call a WebService using HTTP even though I am specifically passing it a HTTPS url.
I am building a FLEX web application that also has a payment module where the user needs to enter his credit card details.
The whole Flex application runs on HTTP. However, whenever the user lands on a page where we ask for credit card details, we want these details to be sent over HTTPS.In this page we need information from the model of the application, because it holds certain selection the user did, the state the application is in, etc.
Do I need to make this page a Module that runs on HTTPS?
Or can I just configure the specific 'credit card' services (we have a JAVA back end) so that these run on HTTPS?
My swf is being served via http protocol. I don't really see this being easily changed. There's a resource that a website has opened up via their api that I need to access but it is using https protocol. Because of this my swf can't access the resource because of security settings.
Option 1 would be to serve my swf via https. I can't do this at the moment.
Option 2 would be set secure="false" property of the cross domain policy file. I can't do this, I dont have access.
I've been trying to find the right configuration for supporting both http/s requests in a Flex app. I've read all the docs and they allude to doing something like the following:
<default-channels>
<channel ref="my-secure-amf">
<serialization>[code]..........
I'm running with Tomcat 5.5.17 and Java 5.The BlazeDS docs say this is the best practice. Is there a better way? With this config, there seems to be 2-3 retries associated with each channel defined in the default-channels element so it always takes ~20s before the my-amf channel connects via a http request. Is there a way to override the 2-3 retries to say, 1 retry for each channel?
I am new new to flex development.I am building a flex application which uses rest APIs. Right now I have created different for different API calls (login, logout, search etc.) And all these services are in main mxml application file.I am wondering if I can create a separate mxml file like services.mxml that I can use to call any service.
View 1 RepliesSo I want to read http streams using flash tcp sockets. I do not really need the http header at all - all I need is body which contains flv. so how to read http response body into byte array using flash sockets?
View 1 RepliesI export a swf/html direct from flash, very simple. I upload it and it works fine in all browsers. If I change http to https in all browsers, no problems.
All browsers except IE - when I change http to https, I just get nothing - if I right click I get "Movie not loaded..." (greyed out) and the usual about flash player.
I've reinstalled my flash player, read loads of tips and tried loads of other hacks but nothing seems to work.
I am using IE 9 (for testing only)
<div id="flashContent">
<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="562" height="300" id="banner" align="middle">
<param name="movie" value="banner.swf" />
[Code].....
I have trouble uploading files with SWFUpload when target servlet is listening on HTTPS. On HTTP it works fine.The issue is only when using FireFox or Opera. On IE it works fine - not tried other browsers.
EDIT:Error message as provided from SWFUpload when in debug mode:
*SWF DEBUG: Event: uploadProgress (OPEN): File ID: SWFUpload_0_0 SWF DEBUG: Event: uploadError : IO Error : File ID: SWFUpload_0_0. IO Error: Error #2038
SWF DEBUG: Event: uploadComplete : Upload cycle complete.*
Is it possible to use the flash.net.NetConnection object to connect to my Flash remoting enabled web application over HTTPS within Tomcat or any other servlet container?
I am using the SpiceFactory cinnamon project for amf remoting and have searched for examples of using HTTPS but see only the reference to a proxy type in the NetConnection object.
If someone could provide a reference or example that would be awesome. Or if it is not possible using the flash.net.NetConnection object are there any recommendations of how to configure HTTPS for the spicefactory cinnamon library.
I am using the google maps API with regular key (not premier).When connecting to my server with http, everything works fine, but when connecting with https i receive the following instead of map: initialization failed please check the API key swf location, version and network availability.Is that because it is not premier key? can I force the google maps API to use http instead of https so that I will receive the maps?
View 2 Replieswe are trying to use our player over https. I am detecting the protocol and then setting the secureConnections to true if it is https however it is still throwing a SecurityError, here is the setup code.
[Code]...
My webapp with flash files (fusioncharts that reads XML data)works well in Firefox, but not in Internet Explorer. The problem
isn't that I can't get the XML data (the Pragma and Chach-Control header, when you get a "Error in loading data") because I can load a Excel file with html data. I get a Movie not loaded error instead, like if that IE can't load the swf file.I tested the application on another computer with https on IE and that didn't work, but it do work on regular http in IE.
I have a standalone flash application which needs to access a [url]... for authentication purpose. BUt I am not able to connect to the URL.
View 5 RepliesI have one swf banner which I want it into .aspx page. The website runs ok under http and the banner plays correctly. After we set the website to run under https, the banner stopped to load. I've tried to load this banner via http link from inside https running page. Nothing happened as well.
Example: Page: [URL]
Script inside:
<script src="http://www.mywebsite.com.br/AC_RunActiveContent.js" language="javascript"></script>
<noscript>
[Code]....
I have a flash banner and i am using AS 2.0. The code embedded in the flash banner works with any url other that the one i am trying to embed.Here is the code i am using:
on (press)
{
getURL("https://wcc.webeventservices.com/eventRegistration/EventLobbyServlet?[code]....
Somehow flash does not like https links. It works fine with other links.
SWFUpload I am using SWFUpload to upload files to a database (Windows XP) over https. Everything works as expected in IE (7 and 8), but using my Firefox 3.3.15 it fails without error message. Using the upload mechanism using http works fine!I found this thread using google. They describe that installing the CAs certificate as trusted issuer would help. Unfortunatly it did not (it was a certificate issued by a CaCert authority).
It works on the machine of my colleague who uses Firefox 3.3.15, but he cannot recall that he did anything special to make it work. I had a look at other machines using Firefox and none of them were able to upload a file to the database.I red that SWFUpload uses flash and that flash might use other certificates than Firefox itself. Does anyone know anything about it?
EDIT: This is the javascript code for the object creation:
// Create the SWFUpload Object
var swfupload_object = new SWFUpload({
upload_url: "[% cgi_path %]/mdb_bulk_import.pl",
file_post_name: 'upload_file',
[code]....
I need to transfer data from a flash application running in a browser to a server running php. If I use an https connection will that be enough to ensure that the data sent from flash to the server is encrypted and sensitive data can't be sniffed, or do I need to do encryption in my flash application itself?
View 1 RepliesI have a standalone flash application which needs to access a https://.. url for authentication purpose. BUt I am not able to connect to the URL. What can be the reason?
View 1 RepliesI've recently started using FDT, for a while I was using FlashDevelop, it had a really handy feature in Compiler options where you can set UseNetworkServices to false which would stop the compiled swf from connecting to the internet and became very useful for running standalone flash apps without security warnings when loading in an external xml file etc.
View 1 RepliesI'm a beginner in WCF, which I have chosen instead of Web Services because all articles and blogs I've read seem to point out that ASMX is old news.I have read a bit about the differences between old Web Services and WCF, and I got the general idea. I also took the MSDN WCF tutorial which seemed simple enough.My problem is that I want to create WCF services that can be consumed by Flash. I've read that it's doable everywhere, but with no obvious A-Z tutorial on how to proceed with the server-side and client-side...
View 2 Repliesmy team is building a game in flash to be embeded in a asp.net application.When the game is over the player have the chance to type his name to save his score.This is done using web services called from flash. The webservice receives the name and score.Since the webservice is publicly available how can I make it only callable from my flash given the following conditions:The .swf is hosted by the same asp.net application There are two domains that can access the same application (I have run previously into cross domain issues).Using SSL is not an option. The webservice has to be consumed by the .swf file.
View 1 RepliesI know most people hate 100% flash-based websites, but I was recently forced to use flash for a college assignment. After creating a fully-featured ria in less than 2 weeks with every feature I could imagine, i've regrettably fallen in love with this beast (which I previously refused to touch with a stick) due to the power of AS3 and the ability to sprinkle it everywhere :-
I now want to port a commercial desktop application of mine (which has been largely unsuccesful) to the web and feel flash/flex is an excellent candidate. While creating a html/css/js version would be ideal (working browser shortcuts, for a start), i'm certain it'll take a year to create in cross-browser html/css/js what would take just ~3 months in flash. Obviously as the (paid) desktop product was unsuccessful, i'd want to minimize the risk/investment in the (free) web application.
I plan on using JSON for web services, so it shouldn't be a huge pita to port in the future.Is this a good strategy for launching a web app you're not yet 100% committed to? Or will the fact i'm using flash doom me from the start? Has anybody else done this? If so, how did your userbase respond to the 100% usage of flash, and did you get around to porting it to standard web technologies?
what's the best and shortest way to get this information?
i've read about BrowserInvokeEvent which contains a boolean of the sort - [URL]
yet i havn't been able to implement it.
how to connect web services to flash
View 2 RepliesWhat would be the best way to secure .net web services used by a flex application (both desktop and browser) that requires login? I thought about requesting the user and password in every method of the web service, and having them stored as variables in the flex app, but I don't feel like this is the most elegant way.
View 2 RepliesI have a html paga which loads a flash(flex) swf file. Using https it loads successfully with Chrome, Safari and Firefox, but not with Internet Explorer.Another page, a simple aspx page, does load in Internet Explorer using https (and no flash in it).Haven't found anything so far on the internet to solve this... Anyone?UPDATE: When I right click on the white screen, 'About Adobe Flash Player 10...' appears... so Flash is loaded. Also, in Charles (http sniffer tool) I can see that the swf is loaded over the network.
So, apparently, Flash Player is running inside my html page, the swf is loaded over the internet but the swf is not displayed in internet explorer browser... Very strange. How can I debug this further to see what the problem is?Meanwhile, in the left down corner, IE keeps on saying: 'Waiting for https://....In all other browsers it works like a charm.You can see that IE shows a Certificate Error, but that's also the case in other browsers. I already clicked on Certificate Error to install the Certificate, but with no success.
I'm trying to load some data from a https-server that when you visit via a browser returns "The security certificate presented by this website has expired or is not yet valid.". But when I accept anyway, the flash on the page page load data.
But when loading from the Flash Editor it return a:
[IOErrorEvent type="ioError" bubbles=false cancelable=false eventPhase=2 text="Error #2032: Stream Error. URL: https://{url}"]
This is what is returned when loading data in Flash Editor from a https server without a valid certificate? Or could there be another problem? The url to the https-server is "changed" via the hosts-file in Windows. Could this cause any error? I have tried changing the hosts pointing to my local webserver, which works fine, but that isn't via https.