Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unexpected switch to HTTPS #573

Open
Horcrux7 opened this issue Mar 7, 2024 · 3 comments
Open

Unexpected switch to HTTPS #573

Horcrux7 opened this issue Mar 7, 2024 · 3 comments

Comments

@Horcrux7
Copy link

Horcrux7 commented Mar 7, 2024

I start the JNLP application with the URL: jnlp://localhost/jnlp/designer?instance=SESSIONID80%3Dnode09qg5z107jsb68fekayxyfbv00

But OpenWebStart switch to HTTPS starting with the follow logline:

Candidate URLs for [l=http://localhost/jnlp/designer?instance=SESSIONID80%3Dnode09qg5z107jsb68fekayxyfbv00 v=null s=I]: [https://localhost/jnlp/designer?instance=SESSIONID80%3Dnode09qg5z107jsb68fekayxyfbv00, http://localhost/jnlp/designer?instance=SESSIONID80%3Dnode09qg5z107jsb68fekayxyfbv00]

On the HTTPS port the service is also running but the certificate does not match to localhost. That I have start it on HTTP (without S).

There is also no warranty that a service that run on another port is the same. If we want start via HTTPS then we use the protocol jnlps:. Why OpenWebStart is doing this? the certificate is wrong? How can we prevent it?

If OpenWebStart download the the JNLP file via HTTPS then the codebase use also HTTPS which is wrong.

@FelixJongleur42
Copy link

Did you try the setting “do not favor https requests” ? Try to check this setting.

https://openwebstart.com/docs/OWSGuide.html#_security_settings

@FelixJongleur42
Copy link

If OpenWebStart download the the JNLP file via HTTPS then the codebase use also HTTPS which is wrong.

that may rather be a problem on the server side which renders the JNLP file.

@Horcrux7
Copy link
Author

Did you try the setting “do not favor https requests” ? Try to check this setting.

This option solve the problem for me. But I think you should cancel the switch to HTTPS if the certificate is not valid. If the user starts with localhost there are many cause why the certificate can be wrong.

If OpenWebStart download the the JNLP file via HTTPS then the codebase use also HTTPS which is wrong.

that may rather be a problem on the server side which renders the JNLP file.

Why you think this is a server problem. If the client starts with HTTP then it continue with HTTP. The user will have causes because do it. If the client starts with HTTPS then the server continue with HTTPS.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants