Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
Bedrock Mission!

Learn more

View all

Sign in to view all badges

SOLVED

mixed content https, http login fail - AEM 6.3 sp1

sreenu539
Level 5
Level 5

Hi there,

Following issue not happened on AEM 6.3.0.2

I have AEM 6.3.1.0 version ( 6.3 with service pack1 ) in my QA environment.

QA AEM author instance accessed through an vip url with 2FA (externa url with https talks to AEM author instance)

When any author user tries to access the AEM author instance using vip url (browser console has js errors about mixed content https, http login), enter credential on aem login screen and click submit button, it just stays on the login page only.

If author user access the AEM instance directly without any vip url and with http , login works and could access the site admin pages.

I tried to have https configuration in my local author instance to see, if i could get login request with httpS rather than http to solve https vs http issue on QA Author when accessed using vip url.

Question:  Is there some new  configuration in AEM 6.3 Service Pack 1 that needs to be done to solve https vs http login issue, this issue did not occur on earlier version 6.3 or 6.3.0.2?

              

I did not get https configuration worked on my local. I have done following things to enable https and tried to access HTTPS://<computername.companyname.com>:4502/crx/de , following is ther response.

This site can’t provide a secure connection

How can I get the https enabled on my local instance?

  I generated a keystore file using following command:

  keytool -genkeypair -keyalg RSA -validity 3650 -alias cqse

-keystore /Users/pulijas/Desktop/Author-latest/ssl/keystorename.keystore  -keypass password123

-storepass password123 -dname "CN=computername.companyname.com, OU=CQ,

O=BWI,L=PHX, S=AZ, C=US"

There were two Apache Felix Jetty Based Http Service configurations.

I clicked on second one with + symbol, as the first one giving ajax error and not able to save the configurations.

Screen Shot 2018-01-17 at 3.39.03 PM.png

and then following OSGI config updated.

Screen Shot 2018-01-17 at 2.52.49 PM.png

Thanks,

Sreeni

1 Accepted Solution
sreenu539
Correct answer by
Level 5
Level 5

I was not able to get the https working in my local to verify if enabling the local instance "httpS" solve the issue.

View solution in original post

7 Replies
smacdonald2008
Level 10
Level 10

Checking with internal ppl. If this did not happen on AEM 6.3 but after the patch - there may be an issue with sp1

sreenu539
Level 5
Level 5

Mixed Content: The page at 'https://author.qa.company.com/libs/granite/core/content/login.html?resource=%2F&$$login$$=%24%24logi...' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://author.qa.company.com/libs/granite/core/content/login.html?resource=%2Flibs%2Fgranite%2Fcsrf%...'. This request has been blocked; the content must be served over HTTPS.

sreenu539
Correct answer by
Level 5
Level 5

I was not able to get the https working in my local to verify if enabling the local instance "httpS" solve the issue.

View solution in original post

sreenu539
Level 5
Level 5

Any update on this?

Following is the request/response cycle.

Request  process:  VIP URL -> https request -> F5 load balancer -> http request -> author

Response process: author -> http response -> F5 load balancer -> http response -> VIP URL ( mixed content issue)

Is it possible to revert back the service pack installed? I was looking to revert back, but I could not see any service pack package in package manager. on welcome screen version number is 6.3.1.0 though.

smacdonald2008
Level 10
Level 10

Looks like an issue with SP1. I recommend opening a ticket so this can be investigated by the AEM Eng/Support team

sreenu539
Level 5
Level 5

I did. Adobe suggested to have SSL enable on the instance though did not get an answer why this issue happened on SP1 and not on earlier version.