Uploads via SSL?

Holgilein

When I just tested my upload page via HTTPS it threw a #2038 error, and a debugging session revealed that the incoming POST data request on the server is empty. The same page is working _perfectly_ via HTTP.

A search regarding "swfupload" + "SSL" + "2038" revealed that Adobe seems to be aware of SSL problems with Flash for over a year, but they are apparently not seriously concerned.

Now, the question is, has anyone on this forum managed to find a workaround to get Uploadify to work via SSL?

Thanks & Fingers crossed...

TravisN.

This is not a bug.
refer to this post http://uploadify.com/forum/viewtopic.php?f=3&t=44&p=153&hilit=https#p153

Holgilein

This may be not a bug in Uploadify, but it is one in Swfupload.

I am using a valid SSL cert, not a self-signed one, but the POST request sent from Swfupload to the server is still crippled, i.e. completely empty.

The link you posted before actually discusses two seperate issues: SSL support and Basic Auth support, which are not related.

Regarding SSL support it now looks to me as if we are at Adobe's good graces.

Regarding Basic Auth I can't offer any help, but at least I got session based authentication to work by sending the session ID via ScriptData. Here's the snippet from my Template::Toolkit file, which is benig fed with the sesion ID:


    [[# special case for uploadify lib: the swf object does not read the ]]
    [[# browser cookies when issuing a file POST, so we have to send the ]]
    [[# session ID via orinary HTTP POST data.                           ]]
    var scriptData = '[[ UPLOADIFY_SESSION_ID ]]'
                   ? '&amp;' + 'UPLOADIFY_SESSION_ID=[[ UPLOADIFY_SESSION_ID ]]'
                   + '&amp;' + $('#upload_form').serialize()
                   : '&amp;' + $('#upload_form').serialize();
    //alert(scriptData);
    $('#fileUpload2').fileUploadSettings('scriptData', scriptData);
    $('#fileUpload2').fileUploadStart();

Of course, this implies the inconvenience of not only reading the session ID from cookie in the request header, but also having to look for a data field UPLOADIFY_SESSION_ID to retrieve the session id on the server.

Alas, not elegant, but working, at least.

Howdy, Stranger!

Categories