Page 1 of 1

Smart Client unable to download via IE

PostPosted: Thu Nov 25, 2010 12:47 am
by guerry
Hi all,

We are running 5.1.4 on a dev server and a test server.

Both servers are SSL-enabled. All communications are via https. Servoy's Tomcat connector is configured for port 443. Port 8080 is disabled.

The dev server (which is *not( showing problems) has a self-signed certificate used for both port 443 and signing the jars. The test server has a Comodo certificate that matches the server's domain which we'll call app.my.com. This certificate is used for port 443 and for signing the jars. The test server is the one having issues.

The following things outline the current situation:
1. smart client loads via Firefox from either server.
2. smart client loads from either server by doing "javaws https://app.my.com/servoy-client/my_cli ... a=someinfo"
3. smart client loads from IE on dev server.
4. smart client fails to load from IE on test server.
4a. IE reports "Unable to download my_client.jnlp from app.my.com. Unable to open this Internet site. The requested site is either unavailable or cannot be found."
4b. The access log for Tomcat reports that it receives a "GET" and using the RequestDumperValve also shows that Tomcat is getting the request.[/list]

We suspected the jar signings, but Firefox and javaws both work fine, while IE does not.

Thoughts anyone?

Much thanks,

Guerry

Re: Smart Client unable to download via IE

PostPosted: Mon Nov 29, 2010 12:40 pm
by jcompagner
what is your exact jnlp file?
is it really with an argument like:

https://app.my.com/servoy-client/my_cli ... a=someinfo

it could be that IE just dont want to store those kind of files when they are get over SSL...
And if IE doesnt save them in the temp folder then java webstart wont get that file so that it can start it.

Re: Smart Client unable to download via IE

PostPosted: Mon Nov 29, 2010 4:37 pm
by guerry
Johan, thanks for the reply! Your comment about IE/JNLP/SSL is a good one. However, our dev server is secured with a certificate, and IE can load the JNLP via SSL from the dev server.

Two differences come to mind: dev has a self-signed cert, and test has a valid, CA-generated certificate. I'm going to rip open the jars and look for double-signed jars, etc. We used the latest signtester.jar to re-sign using the certificate. I'm doubtful this will work as Firefox and Chrome have no problem with loading the smart client, but perhaps IE is picky.

The URL to get the JNLP file is https://my.domain.com/servoy-client/biz ... 02E5FC082C

Any other thoughts are welcome!

Thanks!

Re: Smart Client unable to download via IE

PostPosted: Mon Nov 29, 2010 4:58 pm
by jcompagner
and that is an jnlp url with an argument..

I dont think it has anything to do with jar signing it is the download of the jnlp resource over a ssl connection (and that then that jnlp resource needs to be stored/cached on disk)

does it work with the argument?

https://my.domain.com/servoy-client/biz_dms.jnlp

Re: Smart Client unable to download via IE

PostPosted: Mon Nov 29, 2010 6:47 pm
by guerry
IE gives the same error with or without the url argument against the test server.

IE with the url argument and with ssl enabled works against the dev server.

Re: Smart Client unable to download via IE

PostPosted: Tue Dec 07, 2010 4:23 am
by guerry
We resolved the issue. There was after all a difference in the SSL configuration between the two servers. Automatic SSL forwarding was enabled in the web.xml file on the server that IE could not load from. Clients requests on 443 were being forwarded (it appears) to port 8443, which was not enabled. Once we corrected that, the jnlp files loaded fine via SSL on IE.

Thanks,

Guerry