20MAY2016 Illyriad is now secure connections only |
Post Reply 
|
Page <1234> |
| Author | |
Digioso 
Forum Warrior 
Joined: 09 Feb 2015 Location: Germany Status: Offline Points: 287 |
 Post Options
 Thanks(0)
 Quote Reply
 Posted: 21 May 2016 at 07:50 |
|
@Tensmoor: I'm using NoScript and NoScript now asked me to allow data from illyriad.net. Otherwise I wasn't able to see anything. So maybe you have to also check for illyriad.net .
|
|
|
|
 |
|
|
Tensmoor
Postmaster General 
Joined: 07 Apr 2015 Location: Scotland Status: Offline Points: 1579 |
Post Options
Thanks(0)
Quote Reply
Posted: 21 May 2016 at 09:28 |
I gave that a try Digioso but no joy. I think the problem is that I'm loading resources from a non-https server. As I'm not willing to invest the money needed to secure both the runtime and development servers I'm currently creating a really basic browser extension for Firefox to see if I can do it that way. Edited to change non-http to non-https Edited by Tensmoor - 21 May 2016 at 15:02 |
|
|
|
|
Dungshoveleux
Postmaster 
Joined: 09 Nov 2013 Status: Offline Points: 935 |
Post Options
Thanks(0)
Quote Reply
Posted: 21 May 2016 at 13:05 |
|
Update: as of now saturday 12:01 the problem seems to have been resolved.
A big thank you to GM Thundercat and any other devs involved. I take back the bit about the pub, but on second thoughts, you guys do need to get out a bit. Existing on food like cheese slices* that can be slipped under the office door isn't healthy.  *see Michael from the 1995 book Microserfs by Douglas Coupland.
Edited by Dungshoveleux - 21 May 2016 at 13:11 |
|
|
|
|
Diva
Forum Warrior
Joined: 20 Dec 2011 Location: United States Status: Offline Points: 416 |
Post Options
Thanks(0)
Quote Reply
Posted: 21 May 2016 at 14:37 |
|
I don't know if this is related, but in-game medallist function sharing design by IGM is not showing to the receiver of IGM.
I will make a ticket.
|
|
|
"Um diva.... you are sort of acting like a .... diva...." - PhoenixFire
|
|
|
|
|
Tensmoor
Postmaster General
Joined: 07 Apr 2015 Location: Scotland Status: Offline Points: 1579 |
Post Options
Thanks(0)
Quote Reply
Posted: 23 May 2016 at 12:54 |
|
I've found a solution to the problem with DurcTools not running but there is one outstanding issue that I can't solve. The tools use a mix of localStorage and IndexedDB to store information for players on their own machines. Access to the information stored by both these technologies is only available when the browser that created the data is on the site that it was on when it created it. The change in the URL from http to https means that any data previously stored is no longer available. While this is not a major problem for the majority of the data it is for the notes tool. Some players have created quite a large collection of notes that they will no longer be able to access. I've contacted GM Rikoo to see if we can come up with a method of being able to allow users to export the data and then import it into the new secure site. In the meantime I'll carry on getting the DurcTools site transfered to a secure server and back up and running.
|
|
|
|
|
Digioso
Forum Warrior
Joined: 09 Feb 2015 Location: Germany Status: Offline Points: 287 |
Post Options
Thanks(0)
Quote Reply
Posted: 01 Jun 2016 at 19:10 |
|
Was there another change today morning regarding the Combat report API and HTTPS?
When you access a combat report or API key it now automatically switches to HTTPS. If yes - would it be possible to revoke that change until Kodabears tournament has ended? It seems that his webhoster is blocking https connections and therefore only http is allowed. |
|
|
|
|
|
|
|
GM ThunderCat
Moderator Group
GM Joined: 11 Dec 2009 Location: Everywhere Status: Offline Points: 2157 |
Post Options
Thanks(0)
Quote Reply
Posted: 01 Jun 2016 at 20:01 |
|
Its been changed since the announcement; it may be the redirect - if he changes the url to be https rather than http it should work.
It would be very strange for a webhost to block https
|
|
|
|
|
Digioso
Forum Warrior
Joined: 09 Feb 2015 Location: Germany Status: Offline Points: 287 |
Post Options
Thanks(0)
Quote Reply
Posted: 01 Jun 2016 at 20:07 |
|
Thanks for the answer, TC.
We tried changing the URL to https - but no luck so far. The problem first occured today morning at around 4am server time. Our database update was still working at 04:03:44am and the next one around 5 minutes later didn't work anymore. Right now I'm looking into disabling SSL verifies but so far no luck. Edit: Our current error: Error GETing https://elgea.illyriad.co.uk/external/combatreportsapi/SOMEONES_API_KEY_HERE?since=2016-06-01T04:03:44: Can't connect to elgea.illyriad.co.uk:443 (Connection timed out) Since I can run that query just fine on my PC I guess that port 443 might be blocked by the firewall. Edited by Digioso - 01 Jun 2016 at 20:39 |
|
|
|
|
|
|
|
GM Stormcrow
Moderator Group
GM Joined: 23 Feb 2010 Location: Illyria Status: Offline Points: 3820 |
Post Options
Thanks(0)
Quote Reply
Posted: 02 Jun 2016 at 06:09 |
|
This is a strange one.
Illy's pages (including the API key calls) have been redirecting to https for nearly 2 weeks now; and we certainly haven't changed anything in the last 24-48hrs. Can you command-line test (from the webserver) an https (port 443) GET of any old page (not necessarily an API page) on elgea and see what comes back? And can you then try a standard HTTP (port 80) get of the same page? Would be useful to know. My suspicion is, I'm afraid to say, that this is nothing to do with us; and I think you need to have a convo with your hosting provider, who may have seen a large, sudden, recent spike in traffic inbound and outbound from *.illyriad.co.uk (due to your tournie) and have chosen to block the domain. Do let us know. SC |
|
|
|
|
kodabear
Postmaster General
Player Council - Astronomer Joined: 18 Jun 2013 Location: Lucerna Status: Offline Points: 1237 |
Post Options
Thanks(0)
Quote Reply
Posted: 02 Jun 2016 at 06:19 |
|
I am still able to get the datafiles with out any problems. I am in middle of talking to them had to open up a ticket and who knows how long that will take. I do want to point out the datafiles arent redirecting to https
Edited by kodabear - 02 Jun 2016 at 06:26 |
|
|
|
|
Post Reply
|
Page <1234> |
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
Topic Options
Digioso wrote: