From lukasz@alfa-system.pl Wed Aug  3 11:32:07 2016
From: =?utf-8?q?=C5=81ukasz?= Kopiszka <lukasz@alfa-system.pl>
To: lms@lists.lms.org.pl
Subject: [lms] [OT] HAProxy + SSL + xajax = Mxed Content
Date: Wed, 03 Aug 2016 11:32:00 +0200
Message-ID: <571aec53-115e-a219-a905-9a2d286a9e66@alfa-system.pl>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0102421478351419702=="

--===============0102421478351419702==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Zestaw:
HAProxy + apache (z SSL) + keepalived


Problem:
Mxed Content: The page at 'https://<lms>/?m=3Dnetdevedit&id=3D1' was loaded=20
over HTTPS, but requested an insecure XMLHttpRequest endpoint=20
'http://<lms>/index.php?m=3Dnetdevedit&id=3D1'. This request has been=20
blocked; the content must be served over HTTPS.


Konsola raportuje:
xajax_core.js:395Mixed Content: The page at=20
'https://<lms>/?m=3Dnetdevedit&id=3D1' was loaded over HTTPS, but requested=20
an insecure XMLHttpRequest endpoint=20
'http://<lms>/index.php?m=3Dnetdevedit&id=3D1'. This request has been=20
blocked; the content must be served over HTTPS.xajax._internalSend @=20
xajax_core.js:395xajax.submitRequest @ xajax_core.js:394xajax.request @=20
xajax_core.js:379xajax_ONU_Voip_Phone_Xj @=20
?m=3Dnetdevedit&id=3D1:704customerlist_change @=20
?m=3Dnetdevedit&id=3D1:1494(anonymous function) @ ?m=3Dnetdevedit&id=3D1:1519
xajax_core.js:395XMLHttpRequest cannot load=20
http://<lms>/index.php?m=3Dnetdevedit&id=3D1. Failed to start=20
loading.xajax._internalSend @ xajax_core.js:395xajax.submitRequest @=20
xajax_core.js:394xajax.request @=20
xajax_core.js:379xajax_ONU_Voip_Phone_Xj @=20
?m=3Dnetdevedit&id=3D1:704customerlist_change @=20
?m=3Dnetdevedit&id=3D1:1494(anonymous function) @ ?m=3Dnetdevedit&id=3D1:1519


Zawarto=C5=9B=C4=87 https://<lms>/?m=3Dnetdevedit&id=3D1:
<script type=3D"text/javascript" charset=3D"UTF-8">
/* <![CDATA[ */
try { if (undefined =3D=3D xajax.config) xajax.config =3D {}; } catch (e) {=20
xajax =3D {}; xajax.config =3D {}; };
xajax.config.requestURI =3D "http://<lms>/index.php?m=3Dnetdevedit&id=3D1";
xajax.config.statusMessages =3D false;
xajax.config.waitCursor =3D true;
xajax.config.version =3D "xajax 0.5";
xajax.config.legacy =3D false;
xajax.config.defaultMode =3D "asynchronous";
xajax.config.defaultMethod =3D "POST";
/* ]]> */
</script>


Prawdopodobny winowajca:=20
https://github.com/lmsgit/lms/blob/master/img/xajax_js/xajax_core_uncompresse=
d.js#L117


Czy kto=C5=9B ma dzia=C5=82=C4=85j=C4=85cego LMS z HAProxy?

--=20
Pozdrawiam,
=C5=81ukasz Kopiszka
www.alfa-system.pl


--===============0102421478351419702==--


From tomasz.chilinski@chilan.com Wed Aug  3 11:38:51 2016
From: Tomasz =?utf-8?q?Chili=C5=84ski?= <tomasz.chilinski@chilan.com>
To: lms@lists.lms.org.pl
Subject: Re: [lms] [OT] HAProxy + SSL + xajax = Mxed Content
Date: Wed, 03 Aug 2016 11:38:51 +0200
Message-ID: <f249d5aedaa5667e9100691d86f58614@chilan.com>
In-Reply-To: <571aec53-115e-a219-a905-9a2d286a9e66@alfa-system.pl>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============7710585469086140921=="

--===============7710585469086140921==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

W dniu 03.08.2016 11:32, =C5=81ukasz Kopiszka napisa=C5=82(a):
> Zestaw:
> HAProxy + apache (z SSL) + keepalived
>=20
>=20
> Problem:
> Mxed Content: The page at 'https://<lms>/?m=3Dnetdevedit&id=3D1' was
> loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint
> 'http://<lms>/index.php?m=3Dnetdevedit&id=3D1'. This request has been
> blocked; the content must be served over HTTPS.
>=20
>=20
> Konsola raportuje:
> xajax_core.js:395Mixed Content: The page at
> 'https://<lms>/?m=3Dnetdevedit&id=3D1' was loaded over HTTPS, but
> requested an insecure XMLHttpRequest endpoint
> 'http://<lms>/index.php?m=3Dnetdevedit&id=3D1'. This request has been
> blocked; the content must be served over HTTPS.xajax._internalSend @
> xajax_core.js:395xajax.submitRequest @ xajax_core.js:394xajax.request
> @ xajax_core.js:379xajax_ONU_Voip_Phone_Xj @
> ?m=3Dnetdevedit&id=3D1:704customerlist_change @
> ?m=3Dnetdevedit&id=3D1:1494(anonymous function) @ ?m=3Dnetdevedit&id=3D1:15=
19
> xajax_core.js:395XMLHttpRequest cannot load
> http://<lms>/index.php?m=3Dnetdevedit&id=3D1. Failed to start
> loading.xajax._internalSend @ xajax_core.js:395xajax.submitRequest @
> xajax_core.js:394xajax.request @
> xajax_core.js:379xajax_ONU_Voip_Phone_Xj @
> ?m=3Dnetdevedit&id=3D1:704customerlist_change @
> ?m=3Dnetdevedit&id=3D1:1494(anonymous function) @ ?m=3Dnetdevedit&id=3D1:15=
19
>=20
>=20
> Zawarto=C5=9B=C4=87 https://<lms>/?m=3Dnetdevedit&id=3D1:
> <script type=3D"text/javascript" charset=3D"UTF-8">
> /* <![CDATA[ */
> try { if (undefined =3D=3D xajax.config) xajax.config =3D {}; } catch (e) {
> xajax =3D {}; xajax.config =3D {}; };
> xajax.config.requestURI =3D "http://<lms>/index.php?m=3Dnetdevedit&id=3D1";
> xajax.config.statusMessages =3D false;
> xajax.config.waitCursor =3D true;
> xajax.config.version =3D "xajax 0.5";
> xajax.config.legacy =3D false;
> xajax.config.defaultMode =3D "asynchronous";
> xajax.config.defaultMethod =3D "POST";
> /* ]]> */
> </script>
>=20
>=20
> Prawdopodobny winowajca:
> https://github.com/lmsgit/lms/blob/master/img/xajax_js/xajax_core_uncompres=
sed.js#L117

A dlaczego Twoim zdaniem to jest winowajca? Ten wiersz ustawia domy=C5=9Blny =

Request URI dla xajax-a
na ten zgodny z URL-em wo=C5=82anego dokumentu LMS, wi=C4=99c jak by=C5=82o w=
o=C5=82anie=20
przez https to i xajax
wo=C5=82a przez https.

--=20
Pozdrawiam
Tomasz Chili=C5=84ski, Chilan
opiekun projektu LMS - http://lms.org.pl
szef projektu LMS Plus / LMS+ - http://lms-plus.org

--===============7710585469086140921==--