Openflashchart Error 2032 with SSL and Internet Explorer

[fuero]

I'm experiencing this issue ( http://dwairi.wordpress.com/2009/01/15/open-flash-chart-ie-and-ssl) with piwik 0.4.1. As indicated in the article, this only surfaces if SSL and IE are used. Firefox, Safari and Opera are fine.

I attached a picture of the incident.

The URL seen in the picture is:

index.php?module=VisitsSummary&action=getEvolutionGraph&columns[]=nb_visits&idSite=1&period=day&date=2009-06-15,2009-07-14&viewDataTable=generateDataChartEvolution

As suggested in the blog article above, the following statements inserted in apache's config will fix this.

BrowserMatch MSIE HAVE_MSIE
Header set Expires       "Thu, 01 Jan 1970 01:00:00 GMT"        env=HAVE_MSIE
Header set Cache-Control "must-revalidate, cache, public"       env=HAVE_MSIE
Header set Pragma        "public"                               env=HAVE_MSIE

I couldn't pinpoint the culprit file, so I tried applying this to all (which works).

This shouldn't make a difference, but I have mod_rewrite rules in place to ensure SSL is used.

RewriteEngine On
RewriteRule   /piwik\.php|js)    -                        [L]
RewriteRule   (.*)               https://%{SERVER_NAME}$1 [R,L]

[vipsoft]

I can't reproduce this regression of #550 on my dev environment.

What version of php are you using? Without your Apache config changes, what do the headers from your Piwik installation look like?

[fuero]

Replying to vipsoft:

I can't reproduce this regression of #550 on my dev environment. What version of php are you using?

PHP Version 5.1.6

Without your Apache config changes, what do the headers from your Piwik installation look like?

See the attached file - this is a trace of all requests and responses after clicking the login button.

[fuero]

trace from iehttpheaders

[vipsoft]

Thanks.

It looks like our header changes aren't being applied in the data-file stream. (Lines 1038-1046 and 1060-1068.)

[vipsoft]

(In [1306]) refs #869 - fix Flash+IE over HTTPS

[vipsoft]

fuero: please test the patch.

[fuero]

Tested with IE 7 and IE 8 on Windows XP, works as expected.

[vipsoft]

Thanks.

[matt]

(In [1702]) Only send the 'https work in IE please' headers when in https mode, so that graphs are cached in non-ssl (better user experience when viewing multiSites dashboard) refs #869

[vipsoft]

THis appears to be a regression for reverse proxies where the backend server is http, and only the proxy is https.

[vipsoft]

(In [1705]) fixes #869 - Installation - detect presence of a reverse proxy and warn if mismatch with $_SERVERHTTPS?; add 'reverse_proxy' config setting