Re: Download via Componnt with IE SP2 and SSL
Re: Download via Componnt with IE SP2 and SSL
- Subject: Re: Download via Componnt with IE SP2 and SSL
- From: Chuck Hill <email@hidden>
- Date: Mon, 20 Dec 2004 13:47:49 -0800
Yeah, IE and SSL and downloads used by an external app are a problem.
One of the things that it does is to "write" the download to the FS so
that the external app can use it. But another part of IE prevents the
write due to the no cache settings. At least that is what I recall of
the "display" PDF over HTTPS problem I was fighting with a while back.
The solution (posted I think on www.wodev.com) is to alter the headers
so that caching is permitted. This reduces the security a bit (leaves
the download on the local filesystem) but at least it makes the app
usable.
Setting the headers should work, depending on where you set them. What
code are you setting then in? Have a look at www.wodev.com for code.
Chuck
On Dec 20, 2004, at 1:18 PM, Nick Pilch wrote:
Good suggestion, Chuck. I did that and I see the difference below in
the headers. However, I have a theory. From the pause I see in IE and
the network traffic it produces, I think it may be requesting the file
twice. And the second request fails because the resource has expired.
I tried explicitly setting the "expires" and "Expires" headers in the
request, but that doesn't seem to alter the headers!
I've had the problem before of various browsers requesting resources
twice...
SENDING STREAM (doesn't work)
HTTP/1.1 200 Apple
Date: Mon, 20 Dec 2004 20:13:13 GMT
Server: Apache/1.3.33 (Darwin) mod_ssl/2.8.22 OpenSSL/0.9.7b DAV/1.0.3
Cache-Control: max-age=60
Expires: Mon, 20 Dec 2004 20:14:13 GMT
cache-control: private
cache-control: no-cache
cache-control: no-store
cache-control: must-revalidate
cache-control: max-age=0
content-disposition: attachment; filename="client-prod.zip"
expires: Mon, 20-Dec-2004 20:05:00 GMT
pragma: no-cache
content-length: 15967690
Connection: close
Content-Type: application/zip
DIRECT LINK TO FILE (works)
HTTP/1.1 200 OK
Date: Mon, 20 Dec 2004 20:38:26 GMT
Server: Apache/1.3.33 (Darwin) mod_ssl/2.8.22 OpenSSL/0.9.7b DAV/1.0.3
Cache-Control: max-age=60
Expires: Mon, 20 Dec 2004 20:39:26 GMT
Last-Modified: Wed, 15 Dec 2004 10:10:46 GMT
ETag: "c7478b-f3a5a1-41c00da6"
Accept-Ranges: bytes
Content-Length: 15967649
Connection: close
Content-Type: application/zip
At 11:22 AM -0800 12/20/04, Chuck Hill wrote:
A useful thing to do is to setup a logging http proxy so that you
can determine what headers are being sent with the file. Comparing
these between the direct URL and the component request should point
out the problem. Note the should. :-) I've found that Mac IE (and
I think Safari) will actually scan the downloads, regardless of what
headers you use) and render them as HTML if they believe the contents
are actually HTML. They might do similarly bad things in other
situations.
Chuck
On Dec 20, 2004, at 11:00 AM, Nick Pilch wrote:
Did you ever find a solution to this problem? I am experiencing this
with WO 5.2.2 trying to set up a zip file download.
At 10:40 AM +0200 9/29/04, Ute Hoffmann wrote:
Hallo,
I still look for a solution to my ssl download problem. This
affects .exe and .zip files, but .pdf-Files for example are not
affected.
The download is made via a WOComponent which reads the File into a
NSData Object and hands it over with the appropriate header to the
browser, which starts the download (or not, in my case). The same
file can be downloaded, when I return the filepath in place of the
WOComponent in https without any problems.
The download with the WOComponent works for all file types
(including .exe and .zip) under http but a file not found message
is displayed under https with .exe and .zip-Files and the download
fails, but it still works with e.g. .pdf under https.
Is there anyone around who has a glue what is wrong here?
Everything worked before SP 2 and it still works with other
Browsers. The customer unfortunately works solely under Windows and
with I Explorer. Having the file paths visible is a option, if all
other possibilities (I do not see any at the moment, but there
should be some) fail.
Thanks for any help
Regards
Ute
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
email@hidden
This email sent to email@hidden
--
Nick Pilch / email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
email@hidden
This email sent to email@hidden
--
Practical WebObjects - a book for intermediate WebObjects developers
who want to increase their overall knowledge of WebObjects, or those
who are trying to solve specific application development problems.
http://www.global-village.net/products/practical_webobjects
--
Nick Pilch / email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
village.net
This email sent to email@hidden
--
Practical WebObjects - a book for intermediate WebObjects developers
who want to increase their overall knowledge of WebObjects, or those
who are trying to solve specific application development problems.
http://www.global-village.net/products/practical_webobjects
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden