Webservices 3.4 - setting up mobile access

Webservices 3.4 - setting up mobile access

by Ken Task -
Number of replies: 5
Picture of Particularly helpful Moodlers

Pardon his slight diversion (Moderator can feel free to slap my hand for hijacking this thread), but ...

@Al ... you've peaked my interest about QA testing so I tried to find what was tested and results of those test somewhere in moodledom.   Confusing in that's all tied to tracker ... which is ok ... just not an interface for someone ouside of testing to see if things like setting up web services in 3.4 was tested ... and the results (with any known bug or condition that might cause an issue).

That's the question really (above) ... but a little background ... site with a valid? domain certificate from a CA (specifically Comodo and *.tcea.org). 

Yet, when attempting to setup web services in 3.4, a 'error' is shown that whatever check is being done can't find a valid cert.   In version 3.3 and in 3.2 and in 3.1 ... older versions where https first made it's appearance on the **very same server** in the environmental checks, no such error in checking and so such error in setting up web services.  The moodle instances are in subdirectories not separate subdomains.

Yeah .... I know ... submit a tracker item ... but in order to do that with this one ... I'd have to give someone the files from the CA even the .key file .... something *not* normally done with running https.

'spirit of sharing', Ken

(Edited by Mary Cooch - original submission Monday, 27 November 2017, 3:09 AM)

Average of ratings: -
In reply to Ken Task

Re: Restoring a course from a ten year old moodle.xml?

by AL Rachels -
Picture of Core developers Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers

@Ken - The test for restoring a 1.9 course in the just completed QA cycle is here: https://tracker.moodle.org/browse/MDLQA-11136

The list of all the tests for the cycle are here:

https://tracker.moodle.org/browse/MDLQA-10999

In reply to AL Rachels

Re: Restoring a course from a ten year old moodle.xml?

by Ken Task -
Picture of Particularly helpful Moodlers

@Al ... thanks ... found that earlier.   Going back to it this AM and spending some time, cannot find any test done with setup of web services and a cert ... from a CA, locally generated cert, or a cert for the host or a global cert for a domain from a CA.

Sooooo .... off to find how to comment out that check ... if that's possible!  :\

'spirit of sharing', Ken

In reply to Ken Task

Re: Restoring a course from a ten year old moodle.xml?

by Ken Task -
Picture of Particularly helpful Moodlers

Gonna have to concentrate on one project/issue/server at a time, it appears.   The error is about setting up mobile access to the 3.4 site.

Attempting that, begets:

"It seems that the HTTPS certificate is self-signed or not trusted. The mobile app will only work with trusted sites."

not self-signed ... so that leaves 'not trusted'.
So what does the mobile app consider 'trusted'?

https://sslanalyzer.comodoca.com/?url=https%3A%2F%2Fsos.tcea.org

Did show some weak cipher suites are were still enabled
RC4, RCA, 3DES

Re-set the ciphers so that NONE showed weak.

changed ... and removed weak ciphers.

Used Qualys ssl labs and checked  the server again.
This time graded out as A (was a B) and Server Key and Certificate #1 shows
Trusted: Yes (in green)

So is there some sort of flag retained in the DB?

Curious mind ... wanna know! ;)

Ken

In reply to Ken Task

Re: Webservices- mobile access

by Mary Cooch -
Picture of Documentation writers Picture of Moodle HQ Picture of Particularly helpful Moodlers Picture of Testers Picture of Translators

Hi there -just to let you know I split this discussion because, if I understand it correctly, it is not about restoring a ten year old 1.9 site but has moved onto another subject?

In reply to Mary Cooch

Re: Webservices- mobile access

by Ken Task -
Picture of Particularly helpful Moodlers

Thanks, Mary ... yep, you are correct ... shouldn't have hijacked it.  Was just trying to figure out where the heck my last posting went!!! smile

Thanks, for all you do!   I'll consider my hands slapped ... although very gently! ;)

Ken