[BlueOnyx:08054] Re: Admin GUI via IPAD QUICK FIX?

Wed Aug 10 11:33:25 -05 2011

Jeffrey,

I just got through testing my version of what you did. You are correct that
removing the actions removes the issue. However, it's just the onresize
action that is causing the problem. I must admit I rather like automagically
setting the cursor to the login form field when the page loads. It's kind of
the point of a login page. So the onload action isn't causing a problem and
can remain.

There is another issue with the admserv that showed up during testing with
the droid. If there is a chained certificate like RapidSSL installed on the
admserv and intermediate certificates are needed the gui allows one to add
them in. So far so good. But wait, there's more. The droid reports the
certificate isn't from a trusted authority. (this is using the default
safari mobile browser on a droid2)

The intermediate CA certificates are correctly added to the file
/etc/admserv/certs/ca-certs

OK then why the error? Ha! The directive 
SSLCACertificateFile /etc/admserv/certs/ca-certs

Appears in /etc/admserv/conf/ssl.conf but this NEVER gets loaded by the
admserv httpd.conf

More important it isn't in the /etc/admserv/conf.d/ssl.conf either.

So, while setup nicely everywhere else, admserv is unaware of the CA
certificates installed on the admserv. 

When I added the 
SSLCACertificateFile /etc/admserv/certs/ca-certs

Line to /etc/admserv/conf.d/ssl.conf file and restarted the server it now
works just fine.

This can be tested without a droid by using the command:

openssl s_client -connect <insert your server FQDN here>:81

If you have a chained certificate installed without an appropriate CA chain
it will complain.

I must admit that not having a droid and relying on the kindles of other to
loan their droid has been frustrating. To that I feel compelled to further
appreciate Michael, Greg and the other key contributors of BX because they
support it on such a wide variety of environments and testing must be a
bear.

	Thanks,
		-Stephanie

> -----Original Message-----
> From: Jeffrey Pellin [mailto:jeffrey at px2co.net]
> Sent: Wednesday, August 10, 2011 7:18 AM
> To: BlueOnyx General Mailing List
> Subject: [BlueOnyx:08046] Re: Admin GUI via IPAD QUICK FIX?
> 
> 
> Hi all,
> 
> I have made a very tiny change to the log-in script which seems to
> help
> immeasurably with this problem on Droid devices, and I guess might
> also
> help with iOS.
> 
> Basically on /usr/sausalito/ui/web/login.php
> 
> I changed
> 
> <BODY BGCOLOR="#FFFFFF" onLoad="focuslogin()"
> onResize="if(navigator.appName == 'Netscape') location.reload()"
> LINK="#FFFFFF" VLINK="#FFFFFF">
> 
> to
> 
> <BODY BGCOLOR="#FFFFFF" LINK="#FFFFFF" VLINK="#FFFFFF">
> 
> And I can now log in from a number of Droid devices successfully.
> 
> Regards
> 
> Jeffrey
> 
> 
> 
> On Sat, 6 Aug 2011 15:33:47 -0400, "Stephanie Sullivan"
> <ses at aviaweb.com>
> wrote:
> >> -----Original Message-----
> >> From: Michael Stauber [mailto:mstauber at blueonyx.it]
> >> Sent: Saturday, August 06, 2011 1:44 PM
> >> To: BlueOnyx General Mailing List
> >> Subject: [BlueOnyx:08023] Re: Admin GUI via IPAD
> >>
> >> Hi Stephanie,
> >>
> >> > Did not work (2 different droid 2 phones with different
> versions)
> >> safari
> >> >
> >> > xxx.xxx.xxx.xxx - - [05/Aug/2011:14:02:45 -0400]
> >> > "GET /login.php HTTP/1.1" 200 6840
> >> "http://xxxxxx.xxxxx.xxx:444/login.php"
> >> > "Mozilla/5.0 (Linux; U; Android 2.2; en-us; DROID2 GLOBAL
> >> Build/S273)
> >> > AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile
> >> Safari/533.1"
> >> >
> >> > yyy.yyy.yyy.yyy - - [05/Aug/2011:14:48:20 -0400]
> >> > "GET /login.php HTTP/1.1" 200 6852
> >> "http://yyyyyy.yyyyy.yyy:444/login.php"
> >> > "Mozilla/5.0 (Linux; U; Android 2.1; en-us; ADR6200 Build/ERD79)
> >> > AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile
> >> Safari/530.17"
> >> >
> >> > Worked - opera and firefox on droid 2 phones
> >> >
> >> > zzz.zzz.zzz.zzz - - [04/Aug/2011:13:37:25 -0400]
> >> > "GET /login.php HTTP/1.1" 200 6852 "-"
> >> > "Opera/9.80 (Android 2.2.1; Linux;
> >> > Opera Mobi/ADR-1107051709; U; en) Presto/2.8.149 Version/11.10"
> >> >
> >> > www.www.www.www - - [05/Aug/2011:13:38:04 -0400]
> >> > "GET /login.php HTTP/1.1" 200 6840
> "http://wwwwww.wwww.wwww:444/"
> >> > "Mozilla/5.0 (Android; Linux armv7l; rv:5.0)
> >> > Gecko/20110615 Firefox/5.0 Fennec/5.0"
> >> >
> >> > This might create a clue... :-) I'm working on this because it
> >> irritates
> >> > the hell out of me... :-)
> >>
> >> FWIW: This is the browser identification string from my iPhone:
> >>
> >> "Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_3_5 like Mac OS X; de-de)
> >> AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8L1
> >> Safari/6533.18.5"
> >>
> >> So what we've got here is that all these seem to report as Mozilla
> as
> >> far as
> >> our GUI is concerned. With the exeption of the Opera that you
> quoted
> >> above -
> >> of course.
> >>
> >> --
> >> With best regards
> >>
> >> Michael Stauber
> >
> > Michael,
> >
> > The only ones that fail use the applewebkit and report to use KHTML
> as
> the
> > engine (supposedly like Gecko).
> > AppleWebKit/533.1 (KHTML, like Gecko)
> >
> > 	Thanks,
> > 		-Stephanie
> >
> > _______________________________________________
> > Blueonyx mailing list
> > Blueonyx at mail.blueonyx.it
> > http://mail.blueonyx.it/mailman/listinfo/blueonyx
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx