Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
1
Web Server - Ask For Help / Re: EV SSL Certificates and IE8
« on: August 01, 2012, 03:31:35 AM »
Actually, IE9 had the same problem. Perhaps IE10 finally got it right...
2
Web Server - Ask For Help / Re: EV SSL Certificates and IE8
« on: July 31, 2012, 02:03:46 PM »
I don't know why I didn't think of the trauma the last time I did this for my day job! Rather than systematically step down through the levels of security, I too the easy way out and copied the cipher that finally worked for the restricted FAA computers:
Self.SSLMethod = NET:SSLMethodSSLv23
Self.SSLCertificateOptions.CiphersAllowed = 'RC4:!COMPLEMENTOFDEFAULT'
Now, I get a good TLS1 connection using IE8 or IE9 which may not be the most secure cipher on the planet, it answers the mail so I can continue forward.
Thanks, all! Maybe one day Microsoft will bring Internet Explorer into the 21st century.
Rob
Self.SSLMethod = NET:SSLMethodSSLv23
Self.SSLCertificateOptions.CiphersAllowed = 'RC4:!COMPLEMENTOFDEFAULT'
Now, I get a good TLS1 connection using IE8 or IE9 which may not be the most secure cipher on the planet, it answers the mail so I can continue forward.
Thanks, all! Maybe one day Microsoft will bring Internet Explorer into the 21st century.
Rob
3
Web Server - Ask For Help / Re: EV SSL Certificates and IE8
« on: July 31, 2012, 06:35:17 AM »
Good point regarding the cipher, Bruce. We had to reduce it to work with our government computers that are running IE8. I thought that unrestricted computers were not encumbered by those problems. I will try "dumbing it down" to see if I can make it work. You have been saying for years how lame Internet Explorer is - I am starting to believe you.
Johan, I do find it interesting that you were able to connect with IE8 on an XP machine. I have a similar configuration on one computer and had zero luck connecting. I will have to check the accepted ciphers on that.
Thanks, all! I will post my results here.
Rob
Johan, I do find it interesting that you were able to connect with IE8 on an XP machine. I have a similar configuration on one computer and had zero luck connecting. I will have to check the accepted ciphers on that.
Thanks, all! I will post my results here.
Rob
4
Web Server - Ask For Help / Re: EV SSL Certificates and IE8
« on: July 30, 2012, 05:53:42 PM »
I found that both IE8 on my secondary computer and IE9 on the host computer are unable to connect. I checked the security settings on IE9 and enabled all protocols. Still no joy.
5
Web Server - Ask For Help / Re: EV SSL Certificates and IE8
« on: July 30, 2012, 02:53:09 PM »
Bruce,
I turned on error reporting in the webserver and tried it again. Nothing. No error thrown by the server. The only error that I see is when IE8 eventually times out - I get a "DNS Error - Server cannot be found" error. I have tried connecting via the local IP address and the result is the same.
I am using the same machine for all five browsers. Only IE8 is being stubborn. I have connected using other browsers from other computers (using the URL below) but IE8 just isn't playing nice there, either.
I will try to leave the program up for a few days. If you (or anyone) would like to give it a try, point your Internet Explorer browser to the following URL:
https://www.neinonline.com
Feel free to try it with other browsers as well.
The certificate is registered to trailerlocators.com so it should complain. If you get a certificate error using the URL above, you will have achieved a better success than I have.
As I mentioned before, all other browsers I have tried have had no problem connecting to the server.
My IE8 connects to other EV SSL sites such as E*Trade just fine.
The server is built with Clarion 8.0.8973 and NetTalk 6.38, running on Windows 7 Professional on an old Pentium 4 XPS computer (I think it's about time for an upgrade) with 4G RAM.
Thanks!
Rob
I turned on error reporting in the webserver and tried it again. Nothing. No error thrown by the server. The only error that I see is when IE8 eventually times out - I get a "DNS Error - Server cannot be found" error. I have tried connecting via the local IP address and the result is the same.
I am using the same machine for all five browsers. Only IE8 is being stubborn. I have connected using other browsers from other computers (using the URL below) but IE8 just isn't playing nice there, either.
I will try to leave the program up for a few days. If you (or anyone) would like to give it a try, point your Internet Explorer browser to the following URL:
https://www.neinonline.com
Feel free to try it with other browsers as well.
The certificate is registered to trailerlocators.com so it should complain. If you get a certificate error using the URL above, you will have achieved a better success than I have.
As I mentioned before, all other browsers I have tried have had no problem connecting to the server.
My IE8 connects to other EV SSL sites such as E*Trade just fine.
The server is built with Clarion 8.0.8973 and NetTalk 6.38, running on Windows 7 Professional on an old Pentium 4 XPS computer (I think it's about time for an upgrade) with 4G RAM.
Thanks!
Rob
6
Web Server - Ask For Help / EV SSL Certificates and IE8
« on: July 29, 2012, 03:00:50 PM »
I am installing an EV SSL certificate on one of my sites. All looks good (green bar included) with NetTalk 6.38 for Opera, Firefox, Safari and Chrome, but Internet Explorer 8 does not get far enough into the handshaking process to receive its first page (using the auto-redirect to SSL). I have tried not auto-directing to SSL but all SSL pages create the same condition.
I have checked my internet settings and find that everything appears correct. I have also tried using IE8 on a couple different computers with the same result.
One thing: I am overriding the DNS of the site by entering the URL into my Hosts file. I have tried using a URL that is assigned to my development computer but, while I am expected a certificate error, I get nothing.
What could it be (except that it is Internet Explorer 8!) that could be preventing the certificate exchange in IE* that does not affect any other browsers?
Thanks!
Rob
I have checked my internet settings and find that everything appears correct. I have also tried using IE8 on a couple different computers with the same result.
One thing: I am overriding the DNS of the site by entering the URL into my Hosts file. I have tried using a URL that is assigned to my development computer but, while I am expected a certificate error, I get nothing.
What could it be (except that it is Internet Explorer 8!) that could be preventing the certificate exchange in IE* that does not affect any other browsers?
Thanks!
Rob
7
Web Server - Ask For Help / Re: Mixing SSL and Non-SSL Redux
« on: November 11, 2011, 11:48:13 PM »
1. Glad to hear the session ID doesn't change - it makes the process much simpler.
2. I thought only the server could be bound to an IP address. Binding the session to a single IP will prevent the sniffing and reuse of the session ID (but whoever means to do us harm would have to be pretty darned quick about it anyway). I will look into the class to find that property.
Regarding encrypting the session ID: Wouldn't it be possible to do so on the server as the cookie was sent to the client using the client's IP address as the key, then unencrypt it on the server when reading the cookie? Granted, it MAY be possible to send an encrypted cookie from a different computer, but if the passed IP address was not identical the decryption would fail. However, if the sesssion is bound to the IP address this would accomplish the same thing.
3. The US Government security folks make their own rules. It will be a couple months before they write up their security assessment, but the ability to bind the session to a single IP should be sufficient to overcome the "secure exchange of credentials including Session ID" provision. If I can get my hands on the source document and am not prohibited from sharing I will forward it to you.
Thanks for all the information. This really helped.
Rob
2. I thought only the server could be bound to an IP address. Binding the session to a single IP will prevent the sniffing and reuse of the session ID (but whoever means to do us harm would have to be pretty darned quick about it anyway). I will look into the class to find that property.
Regarding encrypting the session ID: Wouldn't it be possible to do so on the server as the cookie was sent to the client using the client's IP address as the key, then unencrypt it on the server when reading the cookie? Granted, it MAY be possible to send an encrypted cookie from a different computer, but if the passed IP address was not identical the decryption would fail. However, if the sesssion is bound to the IP address this would accomplish the same thing.
3. The US Government security folks make their own rules. It will be a couple months before they write up their security assessment, but the ability to bind the session to a single IP should be sufficient to overcome the "secure exchange of credentials including Session ID" provision. If I can get my hands on the source document and am not prohibited from sharing I will forward it to you.
Thanks for all the information. This really helped.
Rob
8
Web Server - Ask For Help / Mixing SSL and Non-SSL Redux
« on: November 11, 2011, 02:40:57 PM »
In my web app (NT 5.38) I have several pages that refresh every minute. Using SSL (wildcard certificate, client using IE8), the pages stop refreshing after a few minutes. Unecrypted, the pages refresh indefinitely. Therefore, I believe a mixed SSL environment will be the best option.
I read with interest this topic:
http://www.nettalkcentral.com/index.php?option=com_smf&Itemid=36&topic=451.0
and learned that the SSL and non-SSL use two different session queues. Copying the data between the session queues proved doable but I was surprised that in every test I found that the session ID was the same on both servers.
Two Three questions:
1. Will the session ID always be the same between the SSL and non-SSL servers?
2. Is there any form of encryption that is applied by NetTalk to the exchange of the cookie containing the session ID? My security folks require that every exchange of the session ID must be encrypted.
3. If the cookie is not encrypted, does anyone have a suggestion of how to encrypt it between the browser and server (outside of sending the page securely) to prevent hacking? I had considered a reversable encryption using the client's IP address as the key but haven't looking into the best place (probably in the webserver procedure) to resolve that.
As mentioned, SSL appears to break the multiple updates of the pages so I am trying to walk the fine line between security and usability.
Thanks!
Rob
I read with interest this topic:
http://www.nettalkcentral.com/index.php?option=com_smf&Itemid=36&topic=451.0
and learned that the SSL and non-SSL use two different session queues. Copying the data between the session queues proved doable but I was surprised that in every test I found that the session ID was the same on both servers.
1. Will the session ID always be the same between the SSL and non-SSL servers?
2. Is there any form of encryption that is applied by NetTalk to the exchange of the cookie containing the session ID? My security folks require that every exchange of the session ID must be encrypted.
3. If the cookie is not encrypted, does anyone have a suggestion of how to encrypt it between the browser and server (outside of sending the page securely) to prevent hacking? I had considered a reversable encryption using the client's IP address as the key but haven't looking into the best place (probably in the webserver procedure) to resolve that.
As mentioned, SSL appears to break the multiple updates of the pages so I am trying to walk the fine line between security and usability.
Thanks!
Rob
9
FTP - Ask For Help / FTP Does Not Recognize File Has Completed Upload
« on: March 10, 2011, 09:26:59 AM »
I connect to the company intranet via VPN. Previously, they used a Cisco VPN which worked just fine. They recently changed to an SSL VPN connection, and now my NetTalk FTP client does not recognize when the file has transferred and simply sits there until I abort the transfer. The transferred files run just fine, but the .tmp files are not renamed.
I have tested with WS FTP and have had no problemst.
Is there a switch setting in the NetTalk FTP client that will accommodate this new connection?
Thanks!
Rob
I have tested with WS FTP and have had no problemst.
Is there a switch setting in the NetTalk FTP client that will accommodate this new connection?
Thanks!
Rob
10
Web Server - Ask For Help / Re: Memory Form Time Display - Time Resets to 00:00:00 - Regression?
« on: February 28, 2011, 10:43:03 AM »
Bruce,
I missed the announcement of 5.16, but I just checked it today with V5.17. The example I attached encounters a javascript error that I cannot resolve (and yes, I did update all the scripts and restart the browser).
I looked at it using my real web app and found that the time values still reset. I will continue to look into it. Any suggestions where I may be going wrong?
Thanks!
Rob Mikkelsen
I missed the announcement of 5.16, but I just checked it today with V5.17. The example I attached encounters a javascript error that I cannot resolve (and yes, I did update all the scripts and restart the browser).
I looked at it using my real web app and found that the time values still reset. I will continue to look into it. Any suggestions where I may be going wrong?
Thanks!
Rob Mikkelsen
11
Web Server - Ask For Help / Re: Memory Form Time Display - Time Resets to 00:00:00 - Regression?
« on: February 08, 2011, 05:41:40 AM »
Awesome as usual, Bruce! I assume you meant V5.16 - I can wait for it.
Otherwise, the transition to NetTalk 5 has not been difficult at all. The WebShop certainly helped dodge any obstacles.
Thanks!
Rob
Otherwise, the transition to NetTalk 5 has not been difficult at all. The WebShop certainly helped dodge any obstacles.
Thanks!
Rob
12
Web Server - Ask For Help / Memory Form Time Display - Time Resets to 00:00:00 - Regression?
« on: February 07, 2011, 01:59:03 PM »
I must be the only person in the world who encounters this, but there appears to be a regression in the time display from NT4. When a memory form calls itself the time fields are reset to zero.
Here is the link to my original NetTalk4 post that explains the problem in more detail:
http://www.nettalkcentral.com/index.php?option=com_smf&Itemid=36&topic=317.msg1022#msg1022
I was able to duplicate this in the attached application, built with NetTalk5.15 dated 1 Feb 2011. The previous NT5 version performed simlilarly. When the save button is pressed, the Indexpage calls itself. The date remains as previously set but the time is cleared. And... yes, I did copy the web folder! <g>
If this is not a regression, what am I doing wrong? This is the one remaining issue to resolve before putting the web server online.
Thanks!
Rob Mikkelsen
[attachment deleted by admin]
Here is the link to my original NetTalk4 post that explains the problem in more detail:
http://www.nettalkcentral.com/index.php?option=com_smf&Itemid=36&topic=317.msg1022#msg1022
I was able to duplicate this in the attached application, built with NetTalk5.15 dated 1 Feb 2011. The previous NT5 version performed simlilarly. When the save button is pressed, the Indexpage calls itself. The date remains as previously set but the time is cleared. And... yes, I did copy the web folder! <g>
If this is not a regression, what am I doing wrong? This is the one remaining issue to resolve before putting the web server online.
Thanks!
Rob Mikkelsen
[attachment deleted by admin]
13
Web Server - Ask For Help / Re: CR in html tooltip
« on: November 18, 2010, 06:02:16 AM »
Michelis,
I am not sure if this is what you are looking for, but please see the attached JPG.
This page is from a NetTalk app that shows the number of aircraft that land on each runway during specific time intervals. To view the callsigns of the aircraft that comprise that total, all the controller has to do is hover over the cell in the table. I believe this is the same functionality as the tooltip.
To create a linefeed, just insert 
 into the text. This is interpreted as a carriage return.
The problem I had was aligning the columns with the proportional-spaced font. I had to resort to weighting the text if it contained a "W" or "M" and insert a tab ( 	 ) or two to align the columns on the fixed tab stops. It mostly works, but there must be something a bit more elegant.
Cheers!
Rob
[attachment deleted by admin]
I am not sure if this is what you are looking for, but please see the attached JPG.
This page is from a NetTalk app that shows the number of aircraft that land on each runway during specific time intervals. To view the callsigns of the aircraft that comprise that total, all the controller has to do is hover over the cell in the table. I believe this is the same functionality as the tooltip.
To create a linefeed, just insert 
 into the text. This is interpreted as a carriage return.
The problem I had was aligning the columns with the proportional-spaced font. I had to resort to weighting the text if it contained a "W" or "M" and insert a tab ( 	 ) or two to align the columns on the fixed tab stops. It mostly works, but there must be something a bit more elegant.
Cheers!
Rob
[attachment deleted by admin]
14
Web Server - Ask For Help / Re: NT5 - Form Not Validating on Second and Subsequent Submissions
« on: November 18, 2010, 05:27:14 AM »
Bruce,
I started using the iframes out of ignorance and, at the time, perceived or actual limited browse functionality. You can see the current NT4 functionality at
http://www.trailerlocators.com/AdSearchPage .
I obtain an address from the user that is then geocoded and displayed using the google mapping api prior to calling the display function. The list sorted on a field that is calculated as a distance from the entered address. I suppose it would be trivial to put the returned data into an IMDD table and browse list, I will have to play with that.
Since the data is sorted by a calculated field, it is not something that I want to update dynamically - with 38,000 records to review it would take entirely too long to do asynchronously. So, I renamed the "save" button to "search" and call the display when the form is submitted. Under NT4 it worked every time the "search" button was pressed - in NT5 it does not.
While my methodology for deriving the results could certainly be improved, what can I do to live with my less-than-optimal code using the process that previously worked flawlessly in NT4 until I can rework it?
Rob
I started using the iframes out of ignorance and, at the time, perceived or actual limited browse functionality. You can see the current NT4 functionality at
http://www.trailerlocators.com/AdSearchPage .
I obtain an address from the user that is then geocoded and displayed using the google mapping api prior to calling the display function. The list sorted on a field that is calculated as a distance from the entered address. I suppose it would be trivial to put the returned data into an IMDD table and browse list, I will have to play with that.
Since the data is sorted by a calculated field, it is not something that I want to update dynamically - with 38,000 records to review it would take entirely too long to do asynchronously. So, I renamed the "save" button to "search" and call the display when the form is submitted. Under NT4 it worked every time the "search" button was pressed - in NT5 it does not.
While my methodology for deriving the results could certainly be improved, what can I do to live with my less-than-optimal code using the process that previously worked flawlessly in NT4 until I can rework it?
Rob
15
Web Server - Ask For Help / NT5 - Form Not Validating on Second and Subsequent Submissions
« on: November 17, 2010, 09:02:17 PM »
I am converting an app from NT4 to NT5 but have encountered an issue that I cannot seem to overcome. On a page I have two iframes - one to create search criteria using a NetWebForm and the other to display the results. This allows the query to be changed and resubmitted. In NT4 when the "save" button was pressed, the form was validated and the results iframe was updated. In NT5, the form is only validated the first time the "save" button is pressed, but the results are updated with the old search criteria regardless of what is entered in the form.
How do I restore the previous behavior of the form where it is validated and fields updated on every submission?
Rob
How do I restore the previous behavior of the form where it is validated and fields updated on every submission?
Rob