<?xml version="1.0" encoding="utf-8" ?>
<?xml-stylesheet type="text/xsl" href="RSS_xslt_style.asp" version="1.0" ?>
<rss version="2.0" xmlns:WebWizForums="http://syndication.webwiz.co.uk/rss_namespace/">
 <channel>
  <title>DevForce Community Forum : BOS with HTTPS</title>
  <link>http://www.ideablade.com/forum/</link>
  <description>This is an XML content feed of; DevForce Community Forum : DevForce Classic : BOS with HTTPS</description>
  <pubDate>Thu, 11 Jun 2026 09:18:09 -700</pubDate>
  <lastBuildDate>Wed, 06 Feb 2008 19:29:04 -700</lastBuildDate>
  <docs>http://blogs.law.harvard.edu/tech/rss</docs>
  <generator>Web Wiz Forums 9.69</generator>
  <ttl>360</ttl>
  <WebWizForums:feedURL>www.ideablade.com/forum/RSS_post_feed.asp?TID=674</WebWizForums:feedURL>
  <image>
   <title>DevForce Community Forum</title>
   <url>http://www.ideablade.com/forum/forum_images/IdeaBlade_logo_tm.png</url>
   <link>http://www.ideablade.com/forum/</link>
  </image>
  <item>
   <title>BOS with HTTPS : Thanksfor your answerJosh.  When...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=674&amp;PID=2515#2515</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=35" rel="nofollow">patrice</a><br /><strong>Subject:</strong> 674<br /><strong>Posted:</strong> 06-Feb-2008 at 7:29pm<br /><br />Thanks&nbsp;for your answer&nbsp;Josh.<DIV>&nbsp;</DIV><DIV>When I test <a href="https://ss" target="_blank">https://ss</A>&nbsp;I always have the security warning message.</DIV><DIV>&nbsp;</DIV><DIV>I would appreciate if you can post a step-by-step to do the certificate.</DIV><DIV>&nbsp;</DIV><DIV>Thanks a lot</DIV><DIV>&nbsp;</DIV><DIV>Patrice</DIV>]]>
   </description>
   <pubDate>Wed, 06 Feb 2008 19:29:04 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=674&amp;PID=2515#2515</guid>
  </item> 
  <item>
   <title>BOS with HTTPS : Sorry I didn&amp;#039;t get to this...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=674&amp;PID=2514#2514</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=3" rel="nofollow">JoshO</a><br /><strong>Subject:</strong> 674<br /><strong>Posted:</strong> 06-Feb-2008 at 5:25pm<br /><br /><P>Sorry I didn't get to this yesterday Patrice. You guessed the problem correctly - a "self-signed SSL certificate" will crash a .NET remoted application. It is not obvious&nbsp;that you&nbsp;need to&nbsp;install all of the certificates (typically&nbsp;there are 2&nbsp;certs - the Root Authority and the&nbsp;server)&nbsp;of the&nbsp;"Certification Path" onto the client computer. </P><DIV>The certificate publisher - the computer that generated the self-signed SSL certificate - needs to trusted by the client computer by having it's certificate installed into the "Trusted Root Certification Authorites" store of the "Current User" on the client computer (for test purposes I would not use the "Local Computer" certificate store for self-signed certificate root authorities).</DIV><DIV>&nbsp;</DIV><DIV>The reason for this is:</DIV><DIV>&nbsp;</DIV><P style="MARGIN: 0in 0in 0pt" ="Ms&#111;normal"><SPAN style="FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: 'Arial','sans-serif'">All authentication must be transparent to the operating system in .NET remoting.</SPAN></P><P style="MARGIN: 0in 0in 0pt" ="Ms&#111;normal"><SPAN style="FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: 'Arial','sans-serif'">What does this mean ?</SPAN></P><P style="MARGIN: 0in 0in 0pt" ="Ms&#111;normal"><FONT face="Times New Roman" size=3>&nbsp;&nbsp;&nbsp; </FONT><SPAN style="FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: 'Arial','sans-serif'">- .NET remoting does not allow any interception of the client's communication to the server ( it considers this a security breach )</SPAN></P><P style="MARGIN: 0in 0in 0pt" ="Ms&#111;normal"><FONT face="Times New Roman" size=3>&nbsp;&nbsp;&nbsp; </FONT><SPAN style="FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: 'Arial','sans-serif'">- the client application will fail if any message box or dialog box appears requesting credentials (login box) or confirmation to continue connection (unknown SSL certificate publisher)</SPAN></P><P style="MARGIN: 0in 0in 0pt" ="Ms&#111;normal"><FONT face="Times New Roman" size=3>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </FONT><SPAN style="FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: 'Arial','sans-serif'">and the only way to avoid this is by utilizing "pass-through" or "transparent" authentication, such as Windows Integrated, to the proxy server or in the case of SSL: use a&nbsp;</SPAN><SPAN style="FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: 'Arial','sans-serif'">certificate which is automatically recognized by the operating system, such as a Verisign SSL certificate</SPAN></P><P style="MARGIN: 0in 0in 0pt" ="Ms&#111;normal"><FONT face="Times New Roman" size=3>&nbsp;&nbsp;&nbsp; </FONT><SPAN style="FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: 'Arial','sans-serif'">- .Net remoting can also fail if authentication is performed by a third-party application, such as a proxy/firewall/Internet Security application, which only provides transparent</SPAN><FONT face="Times New Roman" size=3>&nbsp;</FONT><SPAN style="FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: 'Arial','sans-serif'">authentication to certain processes or applications and not to the entire operating system</SPAN></P><P style="MARGIN: 0in 0in 0pt" ="Ms&#111;normal"><FONT face="Times New Roman" size=3>&nbsp;</FONT></P><P style="MARGIN: 0in 0in 0pt" ="Ms&#111;normal"><SPAN style="FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: 'Arial','sans-serif'">Most of the time, you can tell if the client computer is using some type of pass-through authentication when the Internet browser is able to connect (download a webpage) without a login box or warning box appearing during the browser application startup.</P><DIV></DIV><P><FONT color=#ff0000><U><FONT color=#000000><strong>Test the Client Computer</strong></FONT></U>: If you install the certificates correctly on the client computer, you should be able to browse a webpage on the test server using SSL (https://) without a security warning message box appearing.</P><DIV><FONT color=#000000>Of course, it really helps to have a network admin on site to show you how to configure all of the above ;)</FONT></DIV><DIV><FONT color=#000000>If you still have trouble getting past the step (marked in red), let me know and I will put together a step-by-step post.</FONT></DIV><DIV><FONT color=#000000></FONT>&nbsp;</DIV><DIV><FONT color=#000000>Thanks for using DevForce,</FONT></DIV><DIV><FONT color=#000000></FONT>&nbsp;</DIV><DIV><FONT color=#000000>Josh</FONT></DIV></FONT></SPAN><span style="font-size:10px"><br /><br />Edited by JoshO - 06-Feb-2008 at 5:26pm</span>]]>
   </description>
   <pubDate>Wed, 06 Feb 2008 17:25:09 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=674&amp;PID=2514#2514</guid>
  </item> 
  <item>
   <title>BOS with HTTPS : I am using the Enterprise version...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=674&amp;PID=2509#2509</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=35" rel="nofollow">patrice</a><br /><strong>Subject:</strong> 674<br /><strong>Posted:</strong> 05-Feb-2008 at 12:16pm<br /><br /> I am using the Enterprise version of Devforce with BOS with VS2005.<br><br>I do remote connection with BOS and (IIS) http at port 80 easily and its working great.<br><br>Now, I'm trying to do remote connection with https at port 443 and I have this error:<br><br>Unable to connect to https://ss:443/pandoraBOS/PersistenceServer.rem.&nbsp; The server or internet connection may be down.<br><br>My Ideablade.ibconfig is (remote section):<br>&nbsp; &lt;remoting&gt;<br>&nbsp;&nbsp;&nbsp; &lt;remotePersistenceEnabled&gt;true&lt;/remotePersistenceEnabled&gt;<br>&nbsp;&nbsp;&nbsp; &lt;communicationsTechnology&gt;Remoting&lt;/communicationsTechnology&gt;<br>&nbsp;&nbsp;&nbsp; &lt;remoteBaseURL&gt;https://ss&lt;/remoteBaseURL&gt;<br>&nbsp;&nbsp;&nbsp; &lt;serverPort&gt;443&lt;/serverPort&gt;<br>&nbsp;&nbsp;&nbsp; &lt;serviceName&gt;pandoraBOS/PersistenceServer.rem&lt;/serviceName&gt;<br>&nbsp;&nbsp;&nbsp; &lt;serverDetectTimeoutMilliseconds&gt;-1&lt;/serverDetectTimeoutMilliseconds&gt;<br>&nbsp;&nbsp;&nbsp; &lt;proxyPort&gt;0&lt;/proxyPort&gt;<br>&nbsp; &lt;/remoting&gt;<br><br>I have a self-sign certificate, do you think is it the problem ?<br><br>thanks<br><br>Patrice Leclerc<br><br>]]>
   </description>
   <pubDate>Tue, 05 Feb 2008 12:16:36 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=674&amp;PID=2509#2509</guid>
  </item> 
 </channel>
</rss>