topic Re: display blocked content in ArcGIS JavaScript Maps SDK Questions

display blocked content

danbecker — Tue, 24 Apr 2012 18:41:40 GMT

I created a basic map displaying Rest Services A, B & C using the "ArcGIS Viewer For Flex Prerelease" GUI, then c/p the app directory to:
https://gis.mydomain.com/flexmap

I then created a similar map using the JS API and hosted the web app here:
https://gis.mydomain.com/jsmap

When the client visits the flex map, everything is fine, but when the JS map is viewed, Internet Explorer displays "IE has blocked this website from displaying content with security certificate errors". After the alert ribbon is clicked, you can choose "display blocked content" and everything works.

What in the JS api would be causing this?

here's how the api si referenced:

<script type="text/javascript" src="https://serverapi.arcgisonline.com/jsapi/arcgis/?v=2.8"></script>

thanks!

Re: display blocked content

JeffPace — Tue, 24 Apr 2012 18:46:22 GMT

I created a basic map displaying Rest Services A, B & C using the "ArcGIS Viewer For Flex Prerelease" GUI, then c/p the app directory to:
https://mydomain.com/flexmap

I then created a similar map using the JS API and hosted the web app here:
https://mydomain.com/jsmap

When the client visits the flex map, everything is fine, but when the JS map is viewed, Internet Explorer displays "IE has blocked this website from displaying content with security certificate errors". After the alert ribbon is clicked, you can choose "display blocked content" and everything works.

What in the JS api would be causing this?

here's how the api si referenced:
<script type="text/javascript" src="https://serverapi.arcgisonline.com/jsapi/arcgis/?v=2.8"></script>
thanks!

Are you connecting to a secure service? if so, you need to put a valid ssl cert on the server. It looks like flex is blindly trusting and invalid cert on the server (BAD) but javascript is not (GOOD).

Re: display blocked content

danbecker — Tue, 24 Apr 2012 18:55:57 GMT

we purchased a wildcard ssl cert and installed it on the server; in the ssl cert, the CN=*mydomain.com

I'm guessing IE throws the warning because *mydomain.com <> gis.mydomain.com ??

Re: display blocked content

danbecker — Tue, 24 Apr 2012 21:01:35 GMT

"IE has blocked this website from displaying content with security certificate errors"

this ribbon error in internet explorer goes away when this is removed from the map:

<script type="text/javascript" src="https://serverapi.arcgisonline.com/jsapi/arcgis/?v=2.8"></script>

If adding the JS api using http, then IE displays this error:
"do you want to view only the webpage content that was delivered securely"

Looks like my only option is to install JS api locally