web site that uses ArcGIS Server Security (users and roles).

3188
8
04-15-2016 01:49 PM
Brendawheatley
New Contributor II


this website has been running since August 2015.  Users are able to login to the site making chagnes to a feature service as needed.

Recently set up SSL on same ArcGIS Server server as requested for another application.  now we recevie a mesage for the site that has been working:

"The existing site using Security no longer works.  We receive an error - Aborted the Sign-In process to avoid sending password over insecure connection."

any ideas?

0 Kudos
8 Replies
RandallWilliams
Esri Regular Contributor

Hi Brenda,

I'm unsure that I understand the question. Would it be possible to post a screen capture of the error you're seeing?

0 Kudos
Brendawheatley
New Contributor II

Sorry the problem is not clear. Here is the error message opening the site. As mentioned this site worked perfectly for a few months. Now we are getting this message.

We installed a SSL about 2 months ago. This is one application I failed to test to make sure it still worked after installing the SSL.

0 Kudos
RandallWilliams
Esri Regular Contributor

Thanks!

A few more questions:

Which browser are you working with? Do you get a different error using Internet Explorer, Firefox, or Chrome?

Was your browser recently updated?

Are you using a self signed certificate or a CA signed certificate?

Does the CN defined in the certificate match the hostname or FQDN of the machine hosting the application?

If your application is public, I'll be happy to check it out. I shouldn't need credentials to help figure out what's up.

0 Kudos
Brendawheatley
New Contributor II

The site is public, of course with credentials to use the site.

http://ccgisapps.charlestoncounty.org/TheAddresser/

I get the same error with all 3 browsers, IE 9, Chrome and Firefox

Yes, the hostname is correct in the SSL

The SSL is a GeoTrust SSL

This site is unable to open with our internal network which tells me this is not a firewall issue since I am inside the county network.

I can get more from IT on Monday as they have gone home for the day

0 Kudos
RandallWilliams
Esri Regular Contributor

OK, I see.

I see that there are two different errors:

a. When accessing http://ccgisapps.charlestoncounty.org/TheAddresser/ - you get the error you reported.

However, you've set up HTTPS, which means that the site should be accessed over the https protocol, like this:

https://ccgisapps.charlestoncounty.org/TheAddresser/

- note the httpS prefix.

I get a different error here - just operation aborted.

At least part of the issue is that your app is not referencing your GIS Server using httpS.

Your app is referencing your ArcGIS Server over http like this:

http://ccgisapps.charlestoncounty.org/arcgis/rest/info?f=json

I believe you've got this referenced  in your settings.js file in the app.

Check lines 44 and 160. Also, lines 211 and 221 reference internal facing hostnames and should be updated.

Essentially:

Update the http references in your settings.js file in your app to use httpS, and update the other references mentioned above to use an external facing machine.

Brendawheatley
New Contributor II

I was just looking at all of this – getting back to the problem from Friday.

Here is why I struggle with it all.

· This site was up and running before we installed the SSL certificate.

· As I set up the SSL, thru ArcGIS Server Admin, I defined the SSL to use both http and https.

· The site that required the SSL works perfectly. However this site is now having the problems where it seems it now wants the https:

I guess since the login is required to the site the https change needs to be made. I will make the changes and get right back to you

Thanks so much

Brenda

0 Kudos
RandallWilliams
Esri Regular Contributor

Looks like you got this fixed. I'm prompted to authenticate when I access your site via HTTPS. I'd now move to require HTTPS only on this site in your web server so that users don't access the HTTP URL and get errors.

Brendawheatley
New Contributor II

Thank you !

Brenda

0 Kudos