<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi all.<div><br></div><div>This list has been quiet for ages, but I hope that we can get some kind of response here as there's been nothing on Squeak-Dev.</div><div><br></div><div>Please see the forwarded message below. It's part of a two-message thread, there are two parties (my company, and <a href="mailto:pierre-edouard.portier@insa-lyon.fr">pierre-edouard.portier@insa-lyon.fr</a>) trying to use SSLSocket, and having no joy.</div><div><br></div><div>Please can anybody help? I'm trying to use CurlPlugin as a workaround, but this is for XML-RPC calls, which needs POST requests with a customer content-type. The upshot is that CurlPlugin is unsuitable.</div><div><br></div><div>Ultimately, I'm thinking that if SSLSocket doesn't work, I'm going to have to look to Gemstone or something, and that's a totally foreign environment to me!</div><div><br></div><div>Cheers,</div><div>Simon<br><div><br><div>Begin forwarded message:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>From: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica">Simon Kirk <<a href="mailto:simon.kirk@pinesoft.co.uk">simon.kirk@pinesoft.co.uk</a>></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>Date: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica">20 February 2009 15:51:18 GMT</font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>To: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica">The general-purpose Squeak developers list <<a href="mailto:squeak-dev@lists.squeakfoundation.org">squeak-dev@lists.squeakfoundation.org</a>></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>Subject: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica"><b>Re: [squeak-dev] SSLSocket and basic http auth (api.del.icio.us or mail.google.com or ...)</b></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>Reply-To: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica">The general-purpose Squeak developers list <<a href="mailto:squeak-dev@lists.squeakfoundation.org">squeak-dev@lists.squeakfoundation.org</a>></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><br></div> </div><div defanghtml_style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I hate to say it but I'm getting even worse behaviour. For HTTPS sites that don't require HTTP auth at all, they also fail.<div><br></div><div>For instance:</div><div><br></div><div>'<a href="https://www.amazon.com'">https://www.amazon.com'</a> asUrl retrieveContents content</div><div><br></div><div>Printit yields: 'error occured retrieving <a href="https://www.amazon.com/">https://www.amazon.com/</a>: Server <a href="http://www.amazon.com">www.amazon.com</a> is not responding'</div><div><br></div><div>Ditto for lots of other sites, such as Google.</div><div><br></div><div>Interestingly, it still works for *some* of the examples from the SSL Workspace provided with the SSL package (<a href="https://investing.schwab.com/">https://investing.schwab.com/</a> and '<a href="https://www.usaa.com')">https://www.usaa.com')</a> but not others.</div><div><br></div><div>This implies some sort of cipher or protocol the SSL suite doesn't support.</div><div><br></div><div>This is pretty bad for us, as we need to do some stuff for a client that involves XML-RPC calls to an SSL server, which I've just discovered doesn't work with the SSL package :(</div><div><br></div><div>Cheers,</div><div>Simon</div><div><br></div><div><br><div><div>On 20 Feb 2009, at 12:57, Pierre-Edouard PORTIER wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Hi!<br>I try to connect to SSL + Basic HTTP Auth sites, for example : <a href="https://mail.google.com" target="_blank">https://mail.google.com</a> or <a href="https://api.del.icio.us" target="_blank">https://api.del.icio.us</a><br> When I try :<br><br>| conn |<br> conn := SSLSocket newConnectionAddress: (NetNameResolver addressForName: '<a href="http://mail.google.com" target="_blank">mail.google.com</a>') port: 443<br><br>I obtain a socket with state: SSLConnectionClosed.<br> With sites that do not require HTTP Basic authentication :<br> <br>| conn |<br>conn := SSLSocket newConnectionAddress: (NetNameResolver addressForName: '<a href="http://www.usaa.com" target="_blank">www.usaa.com</a>') port: 443<br><br>I obtain a SSLSocket with state: SSLConnectionConnected.<br> But don't we need an open socket in order to send the request with the authentication data in the header ?<br><br>In fact, inside the HttpsSocket>>httpsGetDocumentFromUrl: url args: args accept: mimeType request: requestString we find:<br> <br>sock := HttpsSocket new.<br> sock connectTo: serverAddr port: connectToPort.<br> (sock waitForConnectionUntil: (Time millisecondClockValue + (10000) truncated)) ifTrue: [<br> sock sendCommand: 'GET ', page, ' HTTP/1.0', String crlf, <br> (mimeType ifNotNil: ['ACCEPT: ', mimeType, String crlf] ifNil: ['']),<br> 'ACCEPT: text/html', String crlf, "Always accept plain text"<br> requestString, "extra user request. Authorization"<br> 'Host: ', serverName, ':', port printString, String crlf.<br>etc.etc.<br>with the possibility to put the authentication header inside the requestString.<br><br>Has someone any idea how to solve this problem?<br> <br>Thank you.<br><br>pep<br><br> <br><br> <font style="BACKGROUND-COLOR: #ffffff"><p align="center"><font style="BACKGROUND-COLOR: #ffffff"><font face="Arial" size="1">Click <a href="https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==">here</a> to report this email as spam.</font></font></p></font> <br></blockquote></div><br></div><br><br> <a href="http://www.pinesoft.co.uk/"></a><span defanghtml_style="FONT-SIZE: 8pt; FONT-FAMILY: Arial; mso-bidi-font-style: italic"><span defanghtml_style="FONT-SIZE: 8pt; FONT-FAMILY: Arial; mso-bidi-font-style: italic"><o:p><span style="FONT-SIZE: 8pt; FONT-FAMILY: Tahoma"><span style="FONT-SIZE: 18pt; COLOR: green; FONT-FAMILY: Webdings"><div><span style="FONT-SIZE: 24pt; COLOR: green; FONT-FAMILY: Webdings"></span> <br class="webkit-block-placeholder"></div><p class="MsoNormal" defanghtml_style="MARGIN: 0cm 0cm 12pt"><span style="FONT-SIZE: 24pt; COLOR: green; FONT-FAMILY: Webdings">ü</span><font face="Calibri"><span style="FONT-SIZE: 24pt; COLOR: green"> </span><font size="3"><span style="COLOR: green"><strong><font size="2">Consider your responsibility to the environment - think before you print!</font></strong></span> </font></font></p></span></span></o:p></span></span><p><span defanghtml_style="FONT-SIZE: 8pt; FONT-FAMILY: Arial; mso-bidi-font-style: italic"><span defanghtml_style="FONT-SIZE: 8pt; FONT-FAMILY: Arial; mso-bidi-font-style: italic"><o:p><span style="FONT-SIZE: 8pt; FONT-FAMILY: Tahoma"><font size="1">*******************************************************************************************************************************************</font></span></o:p></span></span></p><p><span defanghtml_style="FONT-SIZE: 8pt; FONT-FAMILY: Arial; mso-bidi-font-style: italic"><span defanghtml_style="FONT-SIZE: 8pt; FONT-FAMILY: Arial; mso-bidi-font-style: italic"><o:p><span style="FONT-SIZE: 8pt; FONT-FAMILY: Tahoma"></span><span style="FONT-SIZE: 8pt; FONT-FAMILY: Arial"><font size="1">This email is from Pinesoft Limited. Its contents are confidential to the intended recipient(s) at the email address(es) to which it has been addressed. It may not be disclosed to or used by anyone other than the addressee(s), nor may it be copied in anyway. If received in error, please contact the sender, then delete it from your system. Although this email and attachments are believed to be free of virus, or any other defect which might affect any computer or IT system into which they are received and opened, it is the responsibility of the recipient to ensure that they are virus free and no responsibility is accepted by Pinesoft for any loss or damage arising in any way from receipt or use thereof.</font></span></o:p></span></span></p><p><span defanghtml_style="FONT-SIZE: 8pt; FONT-FAMILY: Arial; mso-bidi-font-style: italic"><span defanghtml_style="FONT-SIZE: 8pt; FONT-FAMILY: Arial; mso-bidi-font-style: italic"><o:p><span style="FONT-SIZE: 8pt; FONT-FAMILY: Arial"><font size="1"><span defanghtml_style="FONT-SIZE: 8pt; FONT-FAMILY: Arial; mso-bidi-font-style: italic"><span defanghtml_style="FONT-SIZE: 8pt; FONT-FAMILY: Arial; mso-bidi-font-style: italic"><o:p><span style="FONT-SIZE: 8pt; FONT-FAMILY: Tahoma"><font size="1">*******************************************************************************************************************************************</font></span></o:p></span></span> <o:p></o:p></font></span></o:p></span></span></p> <address><p defanghtml_style="BACKGROUND: white; MARGIN: 0cm 0cm 0pt; LINE-HEIGHT: normal"><span defanghtml_style="FONT-SIZE: 8pt; mso-bidi-font-style: italic"><o:p><font size="1"></font></o:p></span></p><p class="MsoNormal" defanghtml_style="MARGIN: 0cm 0cm 0pt"><span style="FONT-SIZE: 8pt; FONT-FAMILY: Arial"><font size="1">Pinesoft Limited are registered in <defanghtml_st1:place w:st="on"><defanghtml_st1:country-region w:st="on">England</defanghtml_st1:country-region></defanghtml_st1:place>, Registered number: 2914825. Registered office: <defanghtml_st1:address w:st="on"><defanghtml_st1:street w:st="on">266-268 High Street</defanghtml_st1:street>, <defanghtml_st1:city w:st="on">Waltham</defanghtml_st1:city></defanghtml_st1:address> Cross, <defanghtml_st1:place w:st="on"><defanghtml_st1:city w:st="on">Herts</defanghtml_st1:city>, <defanghtml_st1:postalcode w:st="on">EN8 7EA</defanghtml_st1:postalcode></defanghtml_st1:place></font></span></p><p class="MsoNormal" defanghtml_style="MARGIN: 0cm 0cm 0pt"><span style="FONT-SIZE: 8pt; FONT-FAMILY: Arial"><defanghtml_st1:place w:st="on"><defanghtml_st1:postalcode w:st="on"></defanghtml_st1:postalcode></defanghtml_st1:place></span><font size="1"> </font></p></address> </div><br></blockquote></div><br></div></body></html>