| View previous topic :: View next topic |
| Author |
Message |
zeekay
Joined: 03 Aug 2008
Posts: 63
|
 Posted: Fri Oct 03, 2008 3:18 pm Post subject: Broken HTTPS/SSL browsing |
 |
|
| Trying to use subsonic with SSL, and I have been having an issue with subsonic's internal redirection. For instance when you try to go nowPlaying.view, it redirects to main.vew, and the redirection is to HTTP, it drops the HTTPS, which breaks the site. (Also there are issues with the Now playing info on the right of the main.view, with broken images, links, also using HTTP, instead of HTTPS). Is there any way to force subsonic to use HTTPS urls internally, or to possibly drop the http://, https://, and use relative urls? |
|
| Back to top |
|
 |
mbo030
Joined: 15 Nov 2007
Posts: 4
|
| Posted: Fri Oct 03, 2008 5:34 pm Post subject: |
|
|
| I am running Ubuntu 8.04 and Tomcat 5.5 with SSL. I did not experience any of the described problems. I also had Tomcat and SSL with previous Ubuntu versions and WinXP running. Subsonic always worked great with SSL. |
|
| Back to top |
|
|
zeekay
Joined: 03 Aug 2008
Posts: 63
|
| Posted: Fri Oct 03, 2008 9:36 pm Post subject: |
|
|
| I should clarify, in my case I run nginx in front of tomcat. If I allow HTTP traffic, the pages will forward properly, and I don't have any difficulties. It'll use SSL from streaming and most of the pages, but certain elements, like the album images in the now playing sidebar are transmitted over regular HTTP. I think SSL is broken behind a proxy because of the absolute urls. It'd be great if there was a switch to force it to use HTTPS for all the urls. |
|
| Back to top |
|
|
sindre_mehus
Joined: 29 Nov 2005
Posts: 1138
Location: Oslo, Norway
|
| Posted: Sat Oct 04, 2008 5:38 am Post subject: |
|
|
Yes, I can confirm that there are some bugs related to URL rewriting / redirection when using SSL.
Will be fixed in 3.5 or 3.6.
Thanks!
Sindre |
|
| Back to top |
|
|
zeekay
Joined: 03 Aug 2008
Posts: 63
|
| Posted: Sat Oct 04, 2008 2:40 pm Post subject: |
|
|
| Thanks for the reply sindre! I'll keep an eye out ;D |
|
| Back to top |
|
|
corentin
Joined: 04 Feb 2009
Posts: 3
|
| Posted: Wed Feb 04, 2009 9:55 am Post subject: |
|
|
Hi,
I've tested the new stable release (3.6) and there is some improvement with proxy support, since the embedded player is now trying to reach my server instead of localhost (I'm using Subsonic behind nginx; Jetty is listening on localhost, port 80 and nginx is making it reachable with SSL support on port 443).
There is still an issue, though. I've seen in my firewall logs that the embedded flash player is trying to reach my server on port 80 (HTTP) instead of 443 (HTTPS).
I had a quick look in the source code and I found this (file StringUtil.java, function rewriteUrl):
| Code: |
392 /**
393 * Rewrites the URL by changing the host and port.
394 *
395 * @param urlToRewrite The URL to rewrite.
396 * @param urlWithHostAndPort Use host and port from this URL.
397 * @return The rewritten URL, or an unchanged URL if either argument is not a proper URL.
398 */
399 public static String rewriteUrl(String urlToRewrite, String urlWithHostAndPort) {
400 if (urlToRewrite == null) {
401 return null;
402 }
403
404 try {
405 URL urlA = new URL(urlToRewrite);
406 URL urlB = new URL(urlWithHostAndPort);
407
408 URL result = new URL(urlA.getProtocol(), urlB.getHost(), urlB.getPort(), urlA.getFile());
409 return result.toExternalForm();
410 } catch (MalformedURLException x) {
411 return urlToRewrite;
412 }
413 }
|
I haven't tested it, but I assume rewriting line 408 with urlB.getProtocol() instead would solve the problem. |
|
| Back to top |
|
|
omatzyo
Joined: 03 Mar 2009
Posts: 4
|
| Posted: Tue Mar 03, 2009 9:07 pm Post subject: |
|
|
I've having the same problem listed above (that started this topic). Slightly different configuration. My Ubuntu Subsonic host lies behind an ISA firewall. IDS accepts connections on a non-standard SSL port and mask forwards the traffice to the Subsonic at 8080. But Subsonic tries to change the link and the SSL is then broken, the whole site gets screwy after that.
Inside the LAN everything works great. Any thoughts? |
|
| Back to top |
|
|
Vasteel
Joined: 14 Mar 2009
Posts: 1
|
| Posted: Sat Mar 14, 2009 12:19 am Post subject: |
|
|
I've got the same problem as Omatzyo, here.
SubSonic running on a Windows 2003 server, listens on 8082 HTTP port within local area network.
ISA 2006 listening on 443 SSL port within LAN and public DMZ, redirects (publishes) traffic to the HTTP SubSonic website.
Everything works fine except for the embedded player when I'm using the ISA published SubSonic website (I get no buffering, so I can't play anything).
Everything works OK when I log on to SubSonic directly from the LAN.
If I set ISA to listen on 80 HTTP port, everything works OK too.
I'd like to use SSL on ISA, so if anyone has a clue to override this behavior, I would be very grateful! |
|
| Back to top |
|
|
sindre_mehus
Joined: 29 Nov 2005
Posts: 1138
Location: Oslo, Norway
|
| Posted: Sat Mar 14, 2009 4:38 pm Post subject: |
|
|
corentin,
Yes, I think you hit the nail on the head. The protocol should also be rewritten in rewriteUrl().
I've tested it with apache httpd + mod_ssl + mod_proxy and it seems to work fine.
I'll include the fix in Subsonic 3.7.
Thanks,
Sindre |
|
| Back to top |
|
|
omatzyo
Joined: 03 Mar 2009
Posts: 4
|
| Posted: Tue Mar 17, 2009 11:38 am Post subject: |
|
|
Thank you Sindre, we're looking forward to it!
Vasteel, I've been able to get streaming working fine. Its just that the SSL breaks when the album art is published without ssl.
Try this: run subsonic inside of tomcat (the WAR version is provided here also). then publish a certificate from your CA (export key too), place the cert in a folder on the server and edit the tomcat secure config (server.xml). here is what mine looks like:
| Code: | <Connector port="4330" minSpareThreads="5" maxSpareThreads="75"
enableLookups="true" disableUploadTimeout="true"
acceptCount="100" maxThreads="200"
scheme="https" secure="true" SSLEnabled="true"
keystoreFile="/var/lib/tomcat6/webapps/tckey.pfx" keystorePass="MYPASS"
keystoreType="PKCS12"
clientAuth="false" sslProtocol="TLS"/> |
restart tomcat Now my subonsic server is listening on port 4330 and secured using a trusted certificate (neccessary for ISA to use this as a published site. This should be the same/similar using windows.
ISA: create a weblistener on 443, use the same certificate (or at least one that contains your public address). then publish a site using ssl bridging, uses your new listener, and recognizes a certain string (/subsonic/* for example.)
This works great for me, streams over ssl everywhere. i was a bit vague, so let me know if you need any more help. |
|
| Back to top |
|
|
anitract
Joined: 23 Sep 2009
Posts: 4
|
| Posted: Fri Oct 23, 2009 9:00 pm Post subject: |
|
|
This still seems to to be an issue in the latest version (3. . I've been trying to get subsonic working through apache's ssl authentication, but experience the same thing as the parent poster...it appears there are hard-coded http links which break my https connection when they are hit.
If relative URLS are not going to be used, I was considering using http://apache.webthing.com/mod_proxy_html/ to change the http references on the fly. I was also looking into using tomcat's ssl, but I like the idea of keeping everything together in apache.
Anyone have a different work around? |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
SmartFeed
Register
Profile
Log in to check your private messages
Log in
