Installing and upgrading help

Webservices 3.4 - setting up mobile access

 
Picture of Ken Task
Webservices 3.4 - setting up mobile access
Particularly helpful Moodlers

Pardon his slight diversion (Moderator can feel free to slap my hand for hijacking this thread), but ...

@Al ... you've peaked my interest about QA testing so I tried to find what was tested and results of those test somewhere in moodledom.   Confusing in that's all tied to tracker ... which is ok ... just not an interface for someone ouside of testing to see if things like setting up web services in 3.4 was tested ... and the results (with any known bug or condition that might cause an issue).

That's the question really (above) ... but a little background ... site with a valid? domain certificate from a CA (specifically Comodo and *.tcea.org). 

Yet, when attempting to setup web services in 3.4, a 'error' is shown that whatever check is being done can't find a valid cert.   In version 3.3 and in 3.2 and in 3.1 ... older versions where https first made it's appearance on the **very same server** in the environmental checks, no such error in checking and so such error in setting up web services.  The moodle instances are in subdirectories not separate subdomains.

Yeah .... I know ... submit a tracker item ... but in order to do that with this one ... I'd have to give someone the files from the CA even the .key file .... something *not* normally done with running https.

'spirit of sharing', Ken

(Edited by Mary Cooch - original submission Monday, 27 November 2017, 3:09 AM)

 
Average of ratings: -
Picture of AL Rachels
Re: Restoring a course from a ten year old moodle.xml?
Core developersParticularly helpful MoodlersPlugin developersTesters

@Ken - The test for restoring a 1.9 course in the just completed QA cycle is here: https://tracker.moodle.org/browse/MDLQA-11136

The list of all the tests for the cycle are here:

https://tracker.moodle.org/browse/MDLQA-10999

 
Average of ratings: -
Picture of Ken Task
Re: Restoring a course from a ten year old moodle.xml?
Particularly helpful Moodlers

@Al ... thanks ... found that earlier.   Going back to it this AM and spending some time, cannot find any test done with setup of web services and a cert ... from a CA, locally generated cert, or a cert for the host or a global cert for a domain from a CA.

Sooooo .... off to find how to comment out that check ... if that's possible!  :\

'spirit of sharing', Ken

 
Average of ratings: -
Picture of Ken Task
Re: Restoring a course from a ten year old moodle.xml?
Particularly helpful Moodlers

Gonna have to concentrate on one project/issue/server at a time, it appears.   The error is about setting up mobile access to the 3.4 site.

Attempting that, begets:

"It seems that the HTTPS certificate is self-signed or not trusted. The mobile app will only work with trusted sites."

not self-signed ... so that leaves 'not trusted'.
So what does the mobile app consider 'trusted'?

https://sslanalyzer.comodoca.com/?url=https%3A%2F%2Fsos.tcea.org

Did show some weak cipher suites are were still enabled
RC4, RCA, 3DES

Re-set the ciphers so that NONE showed weak.

changed ... and removed weak ciphers.

Used Qualys ssl labs and checked  the server again.
This time graded out as A (was a B) and Server Key and Certificate #1 shows
Trusted: Yes (in green)

So is there some sort of flag retained in the DB?

Curious mind ... wanna know! ;)

Ken

 
Average of ratings: -
Mary Cooch
Re: Webservices- mobile access
Documentation writersMoodle Course Creator Certificate holdersMoodle HQParticularly helpful MoodlersTestersTranslators

Hi there -just to let you know I split this discussion because, if I understand it correctly, it is not about restoring a ten year old 1.9 site but has moved onto another subject?

 
Average of ratings: -
Picture of Ken Task
Re: Webservices- mobile access
Particularly helpful Moodlers

Thanks, Mary ... yep, you are correct ... shouldn't have hijacked it.  Was just trying to figure out where the heck my last posting went!!! smile

Thanks, for all you do!   I'll consider my hands slapped ... although very gently! ;)

Ken


 
Average of ratings: -