httpservice No xml is being returned using ie https

[harpua92]

I have a datagrid in flex. The protocol is https. I can get the xml to return in every browser except Internet Explorer. I have tried using relative path and also tried the full url with no results at all being returned.

myxmllist.php is receiving the request, it is just not returning the xml.

I have looked everywhere but cannot find where anybody is having an issue with this so I would be grateful for any help.

My headers are also set as
header("Cache-Control: no-cache, must-revalidate");
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Content-type: text/xml");

private function init():void
{
contactService = new HTTPService();
contactService.url = "data/myxmllist.php";
contactService.addEventListener(ResultEvent.RESULT , resultHandler);
contactService.send();
}

FYI this does work if I change the protocol to http instead of the https.

Thank You
Mike

[Peter Cowling]

myxmllist.php is receiving the request, it is just not returning the xml.


How do you know?

[harpua92]

In my php file I had it write to a file and it was pulling the record. I also had it write the session id, just to check if that was an issue and everything matched up. If I turn off https it works just fine. Could this be a port issue or something off the wall like that?

[wvxvw]

Find:
C:\Documents and Settings\{username}\Application Data\Macromedia\Flash Player\Logs\policies.txt
(Sorry, I don't remember where it is on Vista / Mac).
And see if there ware security errors.
If you don't have such file, find C:\Documents and Settings\{username}\mm.cfg
And put there:
PolicyFileLog=1
PolicyFileLogAppend=1
This will start writing security errors into file I mentioned before.

[harpua92]

Unfortunately my computer is still running windows xp pro. In searching I am not seeing any of this information anyplace on my computer. I created the mm.cfg file but my computer does not recognize this file.

[wvxvw]

Well... you have to use it with debug player, are you sure you're using the debug player plugin / activeX?
And, I'd say fortunatelly your computer is still running winXP ;)

[harpua92]

I still cannot get that to work. For what it's worth here is a link
https://www.onnowtv.com/test/test_list.html

[wvxvw]

Yeah, I see now...
There must be something wrong with the headers / certificate... because IE says the page loads something using insecure connection.
One thing I've found about this issue is possibly this:
Because SSL operates below HTTP and has no knowledge of higher-level protocols, SSL servers can only strictly present one certificate for a particular IP/port combination.[9] This means that, in most cases, it is not feasible to use name-based virtual hosting with HTTPS. A solution called Server Name Indication (SNI) exists which sends the hostname to the server before encrypting the connection, although many older browsers don't support this extension. Support for SNI is available since Firefox 2, Opera 8, and Internet Explorer 7 on Windows Vista.
However, this may or may not be related...

Oh, and one more thing, when I open the properties of the page in IE it says that connection is not encrypted, probably meaning that certificate was not accepted...

[harpua92]

Finally figured it out, it was the headers, mainly the session_cache_limiter, I found one article that had this in it, once I put that in it worked.

session_cache_limiter('public');
session_start();
header ("Cache-Control: cache, must-revalidate");
header ("Cache-Control: no-store");
header ("Pragma: public");

here is the article
http://www.blog.lessrain.com/flash-nasty-xml-load-bug-in-internet-explorer/