ofbiz-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Pierre Smits (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (OFBIZ-9206) Loginor login out in demos shows a certificate issue
Date Tue, 07 Feb 2017 13:09:41 GMT

    [ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15855943#comment-15855943

Pierre Smits commented on OFBIZ-9206:

The issue occurs after the login and logout process has been invoked/executed. 

Steps to reproduce the login issue:
# go to https://demo-trunk.ofbiz.apache.org/catalog
# provide login details - userId: admin, password: ofbiz

Steps to reproduce the logout issue:
# access the demo via http://demo-old.ofbiz.apache.org/catalog/control/main?USERNAME=admin&amp;PASSWORD=ofbiz&amp;JavaScriptEnabled=Y
# log out from the application via the 'logout' button/function

> Loginor login out in demos shows a certificate issue
> ----------------------------------------------------
>                 Key: OFBIZ-9206
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-9206
>             Project: OFBiz
>          Issue Type: Bug
>          Components: Demo
>            Reporter: Jacques Le Roux
>            Priority: Minor
> When, from the site main page http://ofbiz.apache.org/, you get to the demos depending
on browser (tested on Windows 7) you get some issues:
> * FF
> ** Management Apps: OK
> ** Ecommerce: OK
> * Chrome (Management Apps or Ecommerce)
> ** stable: OK
> ** old: KO - If you copy the URL by hand it works, and after even from the main page
it works.
> ** trunk: OK
> * IE, same than Chrome
> If, from any browser, you logout from Management Apps you get a certificate issue. Actually
as we use HSTS the browsers protect us from any 3rd party intrusions... Same issue when login
> So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. Maybe it's
due to how OFBiz redirects when login in or login out because, so far, only the login page
is concerned...

This message was sent by Atlassian JIRA

View raw message