submission doesn't work in https

Hi,

I am using xforms in our application. It works well in http. When I switch to https, there is a problem.

There is a submission on page. When I click the button to send the submission. It reports an error "Server didn't respond with valid XML". I checked the log and find the action URL was not called and the login URL was called. It seems the submission didn't send any session information and weblogic server returns the login page.

It there any idea on this problem?

I am using Orbeon Forms Release 3.7.0beta1.200808240812 under weblogic 10.

Thanks,
James

I know we have successfully used HTTPS in some cases, so it is  
probably not a general issue. Try enabling XForms logging and see if  
the logs report something abnormal.

-Erik

On Jun 16, 2009, at 4:24 AM, JamesGu wrote:
--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

mytest.zip

Eric,

I found it is related withe security setting of application server. HTTPS works well if I remove all security-constraint in my application.

I downloaded your 3.7.1 version (orbeon-dev-3.7.1.200905272119.zip) and tried it in my weblogic server. The submission doesn't work when I use auth-method "FORM"

    <login-config>
        <auth-method>FORM</auth-method>

I created a small example.

1. Please extract the files of the zip file attached.
2. It is an EAR package. There are two files under META-INF. There is some priority setting in weblogic-application.xml. There is required to run this on weblogic 10 which I am using. If you are using other application server, "ops" folder is the only folder required, and you can just create a war.
3. Copy all files under orbeon.war into "ops" folder. I didn't include these files because they are too large. Please do not overwirte web.xml and weblogic.xml. I added some security setting at the end of web.xml
4. There is a "test" folder under apps folder. I put all my examples there.
5. In weblogic server, you need to create a weblogic user "abc" with a group "TESTROLE" (defined in web.xml).
6. Open URL, http://localhost/test/ops/test/page.
input username and password, click "Search", you will see message "this is a test".

7. Open URL, https://localhost/test/ops/test/page.
input username and password, click "Search", the submission failed without any error message.

8. I put two log files in zip.
In http.log, everything works well.
In https.log, there is no return . I think maybe the submissio URL is rejected by weblogic server.


I will be appreciated if you could spend some time on this. Please let me know if I missed some configuration. Currently I am using a valid ssl certificate.


Thanks,
James

James,

Thank you very much for the example. This is probably outside the
scope of this mailing-list though at it looks like a multi-hour task.

-Erik

On Thu, Jul 2, 2009 at 2:43 AM, JamesGu<[hidden email]> wrote:

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

Hi Erik,

I work with James Gu, and up until this week, we were able to avoid this problem by setting up an Apache mod_proxy configuration to handle HTTPS at Apached, rewrite the request to HTTP going to WebLogic. Now, we upgraded to WebLogic 12.1.3 and the mod_proxy does not work anymore, so we had to migrate to the mod_weblogic Apache plugin, which keeps the original HTTPS url in the header. We now get the following error in the Orbeon log when we try to login to the application. It seems to be choking on parsing the URL. Can you please help us understand this problem?

We get the following error:

2015-03-19 22:28:40,340 ERROR ProcessorService  - Exception at line 20, column 46 of https://baseqa20151.delphi-tech.com:443/wl1213-test/baseqa20151/oasis2Portal/owsPortal/phs/get-navigation
org.orbeon.oxf.common.ValidationException: line 20, column 46 of https://baseqa20151.delphi-tech.com:443/wl1213-test/baseqa20151/oasis2Portal/owsPortal/phs/get-navigation: Fatal error: The entity name must immediately follow the '&' in the entity reference.
https://baseqa20151.delphi-tech.com:443/wl1213-test/baseqa20151/oasis2Portal/owsPortal/phs/get-navigation, line 20, column 46: Fatal error: The entity name must immediately follow the '&' in the entity reference.
    at org.orbeon.oxf.xml.XMLUtils$ErrorHandler.fatalError(XMLUtils.java:306)
    at orbeon.apache.xerces.util.ErrorHandlerWrapper.fatalError(ErrorHandlerWrapper.java:178)
    at orbeon.apache.xerces.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:351)
    at orbeon.apache.xerces.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:281)
    at orbeon.apache.xerces.impl.XMLScanner.reportFatalError(XMLScanner.java:1459)
    at orbeon.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanEntityReference(XMLDocumentFragmentScannerImpl.java:1252)
    at orbeon.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(XMLDocumentFragmentScannerImpl.java:1717)
    at orbeon.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:324)
    at orbeon.apache.xerces.parsers.XML11Configuration.parse(XML11Configuration.java:845)
    at orbeon.apache.xerces.parsers.XML11Configuration.parse(XML11Configuration.java:768)
    at orbeon.apache.xerces.parsers.XMLParser.parse(XMLParser.java:108)
    at orbeon.apache.xerces.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1201)
    at org.orbeon.oxf.xml.XMLUtils.inputSourceToSAX(XMLUtils.java:350)
    at org.orbeon.oxf.xml.XMLUtils.inputStreamToSAX(XMLUtils.java:335)
    at org.orbeon.oxf.processor.URIProcessorOutputImpl.readURLToStateIfNeeded(URIProcessorOutputImpl.java:394)
    at org.orbeon.oxf.xforms.processor.XFormsURIResolver.resolve(XFormsURIResolver.java:86)
    at org.orbeon.oxf.xforms.processor.XFormsURIResolver.readURLAsDocument(XFormsURIResolver.java:117)
    at org.orbeon.oxf.xforms.XFormsModel.performDefaultAction(XFormsModel.java:660)
    at org.orbeon.oxf.xforms.XFormsContainingDocument.dispatchEvent(XFormsContainingDocument.java:1283)
    at org.orbeon.oxf.xforms.XFormsContainer.initializeModels(XFormsContainer.java:173)
    at org.orbeon.oxf.xforms.XFormsContainingDocument.initialize(XFormsContainingDocument.java:1525)
    at org.orbeon.oxf.xforms.XFormsContainingDocument.<init>(XFormsContainingDocument.java:181)
    at org.orbeon.oxf.xforms.processor.XFormsToXHTML.createCacheContainingDocument(XFormsToXHTML.java:326)
    at org.orbeon.oxf.xforms.processor.XFormsToXHTML.access$200(XFormsToXHTML.java:50)
    at org.orbeon.oxf.xforms.processor.XFormsToXHTML$2.read(XFormsToXHTML.java:152)
    at org.orbeon.oxf.processor.ProcessorImpl.readCacheInputAsObject(ProcessorImpl.java:453)
    at org.orbeon.oxf.xforms.processor.XFormsToXHTML.doIt(XFormsToXHTML.java:121)
    at org.orbeon.oxf.xforms.processor.XFormsToXHTML.access$000(XFormsToXHTML.java:50)
    at org.orbeon.oxf.xforms.processor.XFormsToXHTML$1.readImpl(XFormsToXHTML.java:80)
    at org.orbeon.oxf.processor.ProcessorImpl$6.read(ProcessorImpl.java:995)
    at org.orbeon.oxf.processor.ProcessorImpl$ProcessorOutputImpl.read(ProcessorImpl.java:1178)
    at org.orbeon.oxf.processor.ProcessorImpl.readInputAsSAX(ProcessorImpl.java:350)
    at org.orbeon.oxf.processor.ProcessorImpl.readInputAsSAX(ProcessorImpl.java:355)
     at org.orbeon.oxf.processor.xinclude.XIncludeProcessor.access$100(XIncludeProcessor.java:41)



and here is the log record from the HTTP access.log file for this request:
10.192.16.82 - baseqa20151x [19/Mar/2015:22:28:40 -0400] "GET /wl1213-test/baseqa20151/oasis2Portal/owsPortal/phs/billing-account-policy-inquiry-admin HTTP/1.1" 500 215530


Thanks for your help,
Bill

Bill,

That error is clearly an XML parsing error. It seems to be happening when loading:

    https://baseqa20151.delphi-tech.com/wl1213-test/baseqa20151/oasis2Portal/owsPortal/phs/get-navigation

It could be that the XML in that response is in fact invalid, or could it be that there is an error downstream, which could return something that is not XML?

-Erik

Erik,

Thanks for your reply. I re-posted this issue in stackoverflow and have received a recommendation to set the oxf.url-rewriting.service.base-uri property to fix the rewrite problem. Here is the link to the other issue: Failure to login to an Orbeon Forms application when using HTTPS

-Bill