1 Reply Latest reply on Jan 7, 2014 8:18 PM by Flex harUI

    Security exception in flex application using IPV6


      I have been encountered with following error accessing flex application(Flex 3.0 and AS/3.0) using IPV6 url. This issue is replicable while accessing using GET requests.


      "Fault Code: Channel.Security.Error
      Fault Detail:Destination: DefaultHTTP
      Fault String: Security error accessing url "


      There is no issue when application is accessed using IPV4.

      Investigation so far:

      1. Browsers are configured for IPV6, application is accessible using IPV6 IP address.  Requests with GET method throw this exception.
      2. crossdomain.xml is configured with full access configuration:


         <?xml version="1.0"?>
      <!DOCTYPE cross-domain-policy SYSTEM "/xml/dtds/cross-domain-policy.dtd">
      <site-control permitted-cross-domain-policies="all"/>
      <allow-access-from domain="*" to-ports="*" />
      <allow-http-request-headers-from domain="*" headers="*"/>

      1. crossdomain.xml is located at following server root.  Both client side code and server side code reside in the same machine. crossdomain.xml is accessible while accessed using http://[IPV6 IP]:port/crossdomain.xml
      2. The flash player used in Firefox and IE is 10.* and above. The security configuration that is required in crossdomain.xml for flash player 10 and above is already configured.
      3. The <use-network> flag has been set to "true" during flex compilation.

      Are there any additional settings that needs to be done to access flex based applications using IPV6?  Any help in this regard would be of great help.