[jira] Created: (OFBIZ-1116) Problem making SSL connection to admin apps with Safari

[Nicolas Malin (Jira)]

Problem making SSL connection to admin apps with Safari
-------------------------------------------------------

                 Key: OFBIZ-1116
                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
             Project: OFBiz
          Issue Type: Bug
    Affects Versions: SVN trunk
            Reporter: Joe Eckard
            Priority: Blocker


I can't seem to connect to any admin apps via SSL. The error message from Safari is:

Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12509655 ]

David E. Jones commented on OFBIZ-1116:
---------------------------------------

I noticed this too recently. What I'm not sure of is if it started happening around the time that Safari 3 came out. I'm running version 3.0.2 (522.12). I think this version of Safari may be in beta still, so my solution is to use Firefox instead.

Which version are you using Joe?

Also, is anyone else seeing or not seeing this problem and which version of Safari and OFBiz are you using?

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Blocker
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12509662 ]

Jacques Le Roux commented on OFBIZ-1116:
----------------------------------------

I read this in Opentaps forum :

<<I bet you are using Safari 3 beta... It has this behavior with most websites that involve https connections and certificates. >>

https://sourceforge.net/forum/message.php?msg_id=4390535

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Blocker
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Walter Vaughan]

David E. Jones (JIRA) wrote:
> Also, is anyone else seeing or not seeing this problem and which version of Safari and OFBiz are you using?

Seeing problem
        WindowsXP
        Safari 3.0.1
        OFBiz 4.0 release

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12509678 ]

Joe Eckard commented on OFBIZ-1116:
-----------------------------------

I noticed this some time ago also, I was just hoping it would get fixed.

I'm not using the 3.0 beta, from Safari:About, I'm using Version 2.0.4 (419.3).

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Blocker
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux updated OFBIZ-1116:
-----------------------------------

    Priority: Major  (was: Blocker)

Put Major as using Firefox (or any other browser) is a workaround for this problem.

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12510379 ]

Joe Eckard commented on OFBIZ-1116:
-----------------------------------

For what its worth, this has something to do with SSL client authentication - if you disable it completely (change clientAuth to "false" instead of "want" in the catalina https connector config) then Safari will connect with no problems.

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12548195 ]

Marco Risaliti commented on OFBIZ-1116:
---------------------------------------

Also I have tried to change clientAuth to "false" instead of "want" in the catalina https connector config and now Safari will connect with no problems.
So why Joe don't we close this issue or put it as a minor bug not to a major bug.

Thanks
Marco

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux updated OFBIZ-1116:
-----------------------------------

    Priority: Minor  (was: Major)

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marco Risaliti updated OFBIZ-1116:
----------------------------------

      Component/s: framework
    Fix Version/s: SVN trunk

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>             Fix For: SVN trunk
>
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marco Risaliti closed OFBIZ-1116.
---------------------------------

    Resolution: Won't Fix

So this is not a bug of OFBiz but probably if clientAuth is set to want the browser checks that the site into the certificate is the same of the running site.
In any case you can set clientAuth  to false and this issue will be not more present into Safari.

Thanks
Marco

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>             Fix For: SVN trunk
>
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12552451 ]

Joe Eckard commented on OFBIZ-1116:
-----------------------------------

Technically no, it is not an OFBiz bug, but having a default configuration that is broken in current versions of Safari seems like bad form to me. I would rather see client auth disabled by default or at least there should be a warning in the readme / setup doc / config file.

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>             Fix For: SVN trunk
>
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12552470 ]

Marco Risaliti commented on OFBIZ-1116:
---------------------------------------

Hi David,

here I need your help when you have at disposal a minute.
For me this is a configuration bug in case clientAuth in ofbiz-containers.xml is set to "want" OFBiz doesn't work with Safari.
So probably it's a default value set for go directly in production where a SSL certificate is installed on the server and probably it's correctly to set it to "want".
In a test environment probably it has to be set to "false" and a warning has to be inserted into production guide to set it to "want".

What did you think of it ?

Thanks a lot
Marco

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>             Fix For: SVN trunk
>
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David E. Jones reopened OFBIZ-1116:
-----------------------------------


I have changed the default in SVN rev 605129, but am also reopening this issue because my guess is that this is fixable. It may come in a future Tomcat update, or someone may have to get down into things and research what is going on and if there is anything we can do in OFBiz to fix it.

With this setting Safary will work, but to get Safari to work AND support client certificates a separate Tomcat connector will have to be setup for the client cert listener (on a different port or something...) so that they don't conflict.

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>             Fix For: SVN trunk
>
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12552649 ]

Marco Risaliti commented on OFBIZ-1116:
---------------------------------------

Thanks  a lot David for your promptly reply.
Also I will test it with Safari (as soon as I can) and I will let you know.

Marco

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>             Fix For: SVN trunk
>
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12553336 ]

Marco Risaliti commented on OFBIZ-1116:
---------------------------------------

Hi David,

I have done some searching on google about this problem with Safari and probably I have found the real answer from Apple:

http://docs.info.apple.com/article.html?path=Mac/10.4/en/mh2046.html

http://forums.macrumors.com/showthread.php?t=280529

I did not yet test it and I didn't know if it's really solve the problem on Safari.

Marco

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>             Fix For: SVN trunk
>
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12553380 ]

Joe Eckard commented on OFBIZ-1116:
-----------------------------------

I just tried adding framework/base/cert/demoCA/cacert.pem to my X509Anchors keychain, but I get the same error. (Safari can't open the page "https://localhost:8443/webtools/control/scheduleJob" because it couldn't establish a secure connection to the server "localhost".)

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>             Fix For: SVN trunk
>
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marco Risaliti closed OFBIZ-1116.
---------------------------------

    Resolution: Invalid

I have tested again with the last version of Safari 3.1.2 and the issue is no more present.

Thanks
Marco

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>             Fix For: SVN trunk
>
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12644599#action_12644599 ]

Joe Eckard commented on OFBIZ-1116:
-----------------------------------

The actual issue has not been resolved, we just changed the default value to "false" so that the default config doesn't cause problems with Safari. If you change it back to "want" again, you'll see the error is still there. David's comment suggests he reopened the issue so that when a future Apple or Tomcat fix becomes available, we can resolve the issue and then close it.

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>             Fix For: SVN trunk
>
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux reopened OFBIZ-1116:
------------------------------------


Per Joe's suggestion

> Problem making SSL connection to admin apps with Safari
> -------------------------------------------------------
>
>                 Key: OFBIZ-1116
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-1116
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Joe Eckard
>            Priority: Minor
>             Fix For: SVN trunk
>
>
> I can't seem to connect to any admin apps via SSL. The error message from Safari is:
> Safari can't open the page "https://localhost:8443/webtools/control/main" because it couldn't establish a secure connection to the server "localhost".

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.