display blocked content

386
3
04-24-2012 11:41 AM
danbecker
Occasional Contributor III
I created a basic map displaying Rest Services A, B & C using the "ArcGIS Viewer For Flex Prerelease" GUI, then c/p the app directory to:
https://gis.mydomain.com/flexmap

I then created a similar map using the JS API and hosted the web app here:
https://gis.mydomain.com/jsmap

When the client visits the flex map, everything is fine, but when the JS map is viewed, Internet Explorer displays "IE has blocked this website from displaying content with security certificate errors". After the alert ribbon is clicked, you can choose "display blocked content" and everything works.

What in the JS api would be causing this?

here's how the api si referenced:
<script type="text/javascript" src="https://serverapi.arcgisonline.com/jsapi/arcgis/?v=2.8"></script>


thanks!
0 Kudos
3 Replies
JeffPace
MVP Alum
I created a basic map displaying Rest Services A, B & C using the "ArcGIS Viewer For Flex Prerelease" GUI, then c/p the app directory to:
https://mydomain.com/flexmap

I then created a similar map using the JS API and hosted the web app here:
https://mydomain.com/jsmap

When the client visits the flex map, everything is fine, but when the JS map is viewed, Internet Explorer displays "IE has blocked this website from displaying content with security certificate errors". After the alert ribbon is clicked, you can choose "display blocked content" and everything works.

What in the JS api would be causing this?

here's how the api si referenced:
<script type="text/javascript" src="https://serverapi.arcgisonline.com/jsapi/arcgis/?v=2.8"></script>


thanks!



Are you connecting to a secure service? if so, you need to put a valid ssl cert on the server. It looks like flex is blindly trusting and invalid cert on the server (BAD) but javascript is not (GOOD).
0 Kudos
danbecker
Occasional Contributor III
we purchased a wildcard ssl cert and installed it on the server; in the ssl cert, the CN=*mydomain.com

I'm guessing IE throws the warning because *mydomain.com <> gis.mydomain.com ??
0 Kudos
danbecker
Occasional Contributor III
"IE has blocked this website from displaying content with security certificate errors"

this ribbon error in internet explorer goes away when this is removed from the map:
<script type="text/javascript" src="https://serverapi.arcgisonline.com/jsapi/arcgis/?v=2.8"></script>


If adding the JS api using http, then IE displays this error:
"do you want to view only the webpage content that was delivered securely"

Looks like my only option is to install JS api locally
0 Kudos