• Do not register here on develop.twiki.org, login with your twiki.org account.
• Use View topic Item7848 for generic doc work for TWiki-6.1.1. Use View topic Item7851 for doc work on extensions that are not part of a release. More... Close
• Anything you create or change in standard webs (Main, TWiki, Sandbox etc) will be automatically reverted on every SVN update.
Does this site look broken?. Use the LitterTray web for test cases.

Environment:
Linux 2.6.9-11 x86_64
Apache 2.0.52
Perl 5.8.5 x86_64
CGI::Sessions 4.14

I'm running TWiki 4.0.4 over HTTPS (SSL). In LocalSite.cfg, if I set "$TWiki::cfg{ScriptUrlPath}" and "$TWiki::cfg{PubUrlPath}" to relative paths, "/twiki/bin" and "/twiki/pub", respectively, neither TemplateLogin.pm nor ApacheLogin.pm works because the protocol in the URL keeps changing to "http" (which is not valid on my server). If I specify absolute paths for those two variables, such as "https://www.domain.com/twiki/bin" and "https://www.domain.com/twiki/pub", respectively, I can log in with either method and TWiki seems to work fine, except for one thing... When someone puts a smiley or a ":cool:" or something like that in a page, the ALT text appears instead of the graphics. When you look at the HTML source for the page being displayed, you see that TWiki is trying to get the image from, for example:

http://www.domain.comhttps://www.domain.com/twiki/pub/TWiki/SmiliesPlugin/smile.gif

I've tracked the problem to Func.pm. If I replace line 118 in Func.pm with "return '';", the problem goes away. The problem seems to be with the way urlHost is set. It may be a problem with CGI::Sessions 4.14, but if TWiki were to check to see if "$TWiki::cfg{PubUrlPath}" was an absolute path (i.e., doesn't start with a "/" or, if you prefer, starts with a protocol name followed by a ":") and didn't append urlHost if it was, this wouldn't happen. Another question is why did I have to use absolute paths to get TWiki to work with HTTPS in the first place.

I am calling this an "Urgent" bug since I had to change TWiki's Perl code in order to get it to work.

Beam Davis
Systems and Network Administrator
Transmeta Corporation
3990 Freedom Circle
Santa Clara, CA 95054

E-Mail: beam@transmetaPLEASENOSPAMNOSPAM.com
Telephone: (408) 919-3065
Home: http://www.transmeta.com/

--- People will accept your ideas much more readily if you tell them that Benjamin Franklin said it first.

-- TWiki:Main.BeamDavis

I got this report via e-mail:

I am running TWiki over HTTPS on a non-standard port (in my case 4444) and it did not work right because several of the URLs resolved as http://. After much digging I found out that it was really in CGI.pm that was the issue.

So, to fix it, you just need to add the following line to your LocalSite.cfg file so CGI will know you are using HTTPS:

$ENV{HTTPS} = 'ON';

And everything works fine.

This needs to be tested.

Some sites use http and https protocol on the same TWiki installation in order to access content from within and outside of the firewall. That is, a hard-coded $ENV{HTTPS} = 'ON' does not help. Possibly set the env variable conditionally based on the protocol? I am not sure how to detect the protocol, it is not available from the env variables. Hmm, it could be taken from {DefaultUrlHost}.

-- PTh

I agree this needs to be tested, but it should be followed up in a TWiki:Codev.TWikiWithHTTPS topic, initially as a feature request. We cannot incorporate https testing into the normal release cycle, it is already desperately onerous and understaffed. Therefore we cannot claim to support https in any part of the core documentation.

Discarded pending a SMART design and plan from Codev discussion.

CC

ItemTemplate
Summary Problems with TWiki using HTTPS.
ReportedBy TWiki:Main.BeamDavis
Codebase 4.0.4
SVN Range TWiki-4.1-beta1, Sun, 23 Jul 2006, build 11129
AppliesTo Engine
Component

Priority Urgent
CurrentState No Action Required
WaitingFor

Checkins

TargetRelease n/a
Edit | Attach | Watch | Print version | History: r4 < r3 < r2 < r1 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r4 - 2006-09-24 - CrawfordCurrie
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback