urlloader and localhost in https

[Robert Mc Dowell]

Hi folks,

is there any way to make actionscript to accept a self signed certificate

when urlLloader requests to a local server (so on the client side)?

thanks

[kglad]

are you creating an air app?

[Robert Mc Dowell]

No, embedded swf in website page

[kglad]

there should be restrictions on your swf's access to the user's computer any work-around would be a security issue.

what are you trying to do?

[Robert Mc Dowell]

ok so the only solution is to let the user download the cert and install it on his browser?

[kglad]

what are you trying to do?

[Robert Mc Dowell]

the client has its own web server in localhost only. and would like my swf

access to his web server in https since the swf is also loaded in https

[kglad]

you should be able to use a cross-domain policy.

[Robert Mc Dowell]

I already have on the doc root of the client web server (which is only accessible from the localhost)

<?xml version="1.0"?>

<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">

<cross-domain-policy>

        <site-control permitted-cross-domain-policies="all"/>

        <allow-http-request-headers-from domain="*" headers="*" secure="false"/>

        <allow-access-from domain="*" secure="false"/>

</cross-domain-policy>

should I remove any restriction on the swf side?

[Robert Mc Dowell]

ok now http works well, but https connection returns from the server

Connection from 127.0.0.1:27376.

getpeername failed: Transport endpoint is not connected QUITTING

on the swf side:

onSecurityStatus error: Error #2048

does it need a specific certificate?

btw the connection is done with https://127.0.0.1:59999/index.html

[kglad]

you'll need to allow connection from your secure domain.  i've not done that before so you'll need to check the documentation for an explanation.

[Robert Mc Dowell · Accepted solution]

yes, I read it, and apparently flash is dependent from the browser CA authority.

So the only way is to tell the client to install the CA root first to be able to communicate successfully.