How to Filter Initial Client HTTP Headers on a CSS11506 SSL module

Is there any way to filter the initial client headers on a css11506 ssl module ?? (software version 8.1)
This is one of the default options on the "old" SCA11000 appliances.

Douglas, with an SSL module, the CSS can decrypt HTTPS traffic and see the cleartext HTTP traffic.
We can then apply any rules to the header.
I think in this case, the question refered to some data injected in the http header by the CSS and filter what data from the client certificate should be dropped or inserted.
We currently do not have this option on the CSS.
Gilles.

Similar Messages

HTTPS Keepalive with the CSM & SSL Module

Has anyone had any success getting a secured web page for a keepalive using the CSM with and SSL module. If so can post an example?
Thank you,
Dave

Hi David,
Here find some full config example for your perusal for CSM and SSL Services Module Initial Configuration Example
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a0080216c16.shtml
2nd config example to Configuring CSM to Load Balance SSL to a Farm of SCAs for One-Armed Proxy Mode
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00801aca55.shtml
Sachin garg

Generate PDF using Managed Bean with custom HTTP headers

Background
Generate a report in various formats (e.g., PDF, delimited, Excel, HTML, etc.) using JDeveloper 11g Release 2 (11.1.2.3.0) upon clicking an af:commandButton. See also the StackOverflow version of this question:
http://stackoverflow.com/q/13654625/59087
Problem
HTTP headers are being sent twice: once by the framework and once by a bean.
Source Code
The source code includes:
- Button Action
- Managed Bean
- Task Flow
Button Action
The button action:
<af:commandButton text="Report" id="submitReport" action="Execute" />
Managed Bean
The Managed Bean is fairly complex. The code to `responseComplete` is getting called, however it does not seem to be called sufficiently early to prevent the application framework from writing the HTTP headers.
HTTP Response Header Override
* Sets the HTTP headers required to indicate to the browser that the
* report is to be downloaded (rather than displayed in the current
* window).
protected void setDownloadHeaders() {
HttpServletResponse response = getServletResponse();
response.setHeader( "Content-Description", getContentDescription() );
response.setHeader( "Content-Disposition", "attachment, filename="
+ getFilename() );
response.setHeader( "Content-Type", getContentType() );
response.setHeader( "Content-Transfer-Encoding",
getContentTransferEncoding() );
Issue Response Complete
The bean indirectly tells the framework that the response is handled (by the bean):
getFacesContext().responseComplete();
Bean Run and Configure
public void run() {
try {
Report report = getReport();
configure(report.getParameters());
report.run();
} catch (Exception e) {
e.printStackTrace();
private void configure(Parameters p) {
p.put(ReportImpl.SYSTEM_REPORT_PROTOCOL, "http");
p.put(ReportImpl.SYSTEM_REPORT_HOST, "localhost");
p.put(ReportImpl.SYSTEM_REPORT_PORT, "7002");
p.put(ReportImpl.SYSTEM_REPORT_PATH, "/reports/rwservlet");
p.put(Parameters.PARAM_REPORT_FORMAT, "pdf");
p.put("report_cmdkey", getReportName());
p.put("report_ORACLE_1", getReportDestinationType());
p.put("report_ORACLE_2", getReportDestinationFormat());
Task Flow
The Task Flow calls Execute, which refers to the bean's `run()` method:
entry -> main -> Execute -> ReportBeanRun
Where:
<method-call id="ReportBeanRun">
<description>Executes a report</description>
<display-name>Execute Report</display-name>
<method>#{reportBean.run}</method>
<outcome>
<fixed-outcome>success</fixed-outcome>
</outcome>
</method-call>
The bean is assigned to the `request` scope, with a few managed properties:
<control-flow-rule id="__3">
<from-activity-id>main</from-activity-id>
<control-flow-case id="ExecuteReport">
<from-outcome>Execute</from-outcome>
<to-activity-id>ReportBeanRun</to-activity-id>
</control-flow-case>
</control-flow-rule>
<managed-bean id="ReportBean">
<description>Executes a report</description>
<display-name>ReportBean</display-name>
<managed-bean-scope>request</managed-bean-scope>
</managed-bean>
The `<fixed-outcome>success</fixed-outcome>` strikes me as incorrect -- I don't want the method call to return to another task.
Restrictions
The report server receives requests from the web server exclusively. The report server URL cannot be used by browsers to download directly, for security reasons.
Error Messages
The error message that is generated:
Duplicate headers received from server
Error 349 (net::ERR_RESPONSE_HEADERS_MULTIPLE_CONTENT_DISPOSITION): Multiple distinct Content-Disposition headers received. This is disallowed to protect against HTTP response splitting attacks.Nevertheless, the report is being generated. Preventing the framework from writing the HTTP headers would resolve this issue.
Question
How can you set the HTTP headers in ADF while using a Task Flow to generate a PDF by calling a managed bean?
Ideas
Some additional ideas:
- Override the Page Lifecycle Phase Listener (`ADFPhaseListener` + `PageLifecycle`)
- Develop a custom Servlet on the web server
Related Links
- http://www.oracle.com/technetwork/middleware/bi-publisher/adf-bip-ucm-integration-179699.pdf
- http://www.slideshare.net/lucbors/reports-no-notes#btnNext
- http://www.techartifact.com/blogs/2012/03/calling-oracle-report-from-adf-applications.html?goback=%2Egde_4212375_member_102062735
- http://docs.oracle.com/cd/E29049_01/web.1112/e16182/adf_lifecycle.htm#CIABEJFB
Thank you!

The problem was that the HTTP headers were in fact being written twice:
1. The report server was returning HTTP response headers.
2. The bean was including its own HTTP response headers (as shown in the question).
3. The bean was copying the entire contents of the report server response, including the headers, into the output stream.
Firefox ignored the duplicate header errors, but Google Chrome did not.

[WLS 10.3]:Weblogic.cache.filter does not cache all http headers

When using Weblogic CacheFilter servlet filter to speed our request. However, cached pages miss
some HTTP Headers ie: Content-Encoding.
As a result, if we setup a GZIP filter on most popular static text oriented document like css, html, js, the GZIP filter add a Content-Encoding http header set to gzip. But as CacheFilter forget that header, client receives the correct content-type but not anymore the Content-encoding.
Steps to Reproduce
Ask a static file like a .js library and sniff the HTTP headers. Switch the servlet filter order between gzip and CacheFilter, the HTTP header is correctly set but not when putting cache filter first.

When using Weblogic CacheFilter servlet filter to speed our request. However, cached pages miss
some HTTP Headers ie: Content-Encoding.
As a result, if we setup a GZIP filter on most popular static text oriented document like css, html, js, the GZIP filter add a Content-Encoding http header set to gzip. But as CacheFilter forget that header, client receives the correct content-type but not anymore the Content-encoding.
Steps to Reproduce
Ask a static file like a .js library and sniff the HTTP headers. Switch the servlet filter order between gzip and CacheFilter, the HTTP header is correctly set but not when putting cache filter first.

How to set Custom HTTP headers in HTTP binding?

How to set custom HTTP headers before sending the Rest based request in HTTP binding?

sharon38_74 wrote:
they said that our internal application needs to send a "login request" to etran via SSL with the user's information encoded in base 64 format. etran captures the HTTP header containing user authentication and authorization information, and parses the required information from the HTTP header.
My question is that how I set user information in HTTP header? From my understanding, once I am able to set the user information in HTTP header, it is in base 64 format?Your application need to act like a proxy. You can invoke a HTTP request programmatically using java.net.URLConnection. You can set request headers using URLConnection#setRequestProperty(). Also see the API docs: [http://java.sun.com/javase/6/docs/api/java/net/URLConnection.html]. You only need to know the header field name where to set the Base64-encoded value in. You need to Base64-encode the value yourself.

How to get HTTP headers from Data Provider Class?

Hi,
I'm the beginner in SAP NetWeaver Gateway. Using Service Builder I created CRUD OData web service and implemented CRUD operations in Data Provider Class. Data Provider Class has methods like MYENTITY_GET_ENTITYSET, MYENTITY_GET_ENTITY, MYENTITY_CREATE_ENTITY, MYENTITY_UPDATE_ENTITY. How can I get HTTP headers from the methods of this Data Provider Class?

You can do so by using the following code in DPC
Data : Lo_facade type ref to /IWBEP/IF_MGW_DP_INT_FACADE.
lo_facade ?= /iwbep/if_mgw_conv_srv_runtime~get_dp_facade( ).
lt_client_headers = lo_facade->get_request_header( ).
Regards,
Atanu

How do I see http headers in new web inspector resource tab?

In Safari 4.x there was a simple tab to see the http headers, but in the new fancy resource tab I can't find them anywhere. Where did they go?

Perhaps you need to take some tutorials.
LabVIEW Introduction Course - Three Hours
LabVIEW Introduction Course - Six Hours
Attachments:
Example_VI_BD.png ‏11 KB

HTTP Headers - enabling caching and compression with the portal?

Has anyone configured their web server (IIS or Apache) or use a commercial product to flawlessly cache and compress all content generated by the portal?
Compression and caching is critical for making our portal based applictions work for overseas users. It should be doable, just taking advantage of standard HTTP protocols, but implementing this a complex system like the portal is tricky, we seem to be generating different values in the HTTP Headers for the same types of files (such as CSS).
We are running Apache so can't take advantage of the built in compression capabilities of the .net portal. We are running the java vervion. 6.1 mp1, sql server 2000 (portal, search, collab, publisher, studio, analytics, custom .net and java portlets on remote server).
Basically our strategy is to compress all outgoing static and dynamic text content (html, CSS, javascript), and to cache all static files (CSS, javascript, images) for 6 months to a year depending on file type.
Here are some links on the subjects of caching and compression that I have compiled:
Caching & Compression info and tools
http://www.webreference.com/internet/software/servers/http/compression/
http://www.ibm.com/developerworks/web/library/wa-httpcomp/
http://www.mnot.net/cache_docs/
http://www.codeproject.com/aspnet/HttpCompressionQnD.asp?df=100&forumid=322472&exp=0&select=1722189#xx1722189xx
http://en.wikipedia.org/wiki/Http_compression
http://perl.apache.org/docs/tutorials/client/compression/compression.html
https://secure.xcache.com/Page.aspx?c=60&p=590
http://www.codinghorror.com/blog/archives/000807.html
http://www.howtoforge.com/apache2_mod_deflate
http://www.ircache.net/cgi-bin/cacheability.py
http://betterexplained.com/articles/how-to-optimize-your-site-with-http-caching/
http://betterexplained.com/articles/speed-up-your-javascript-load-time/
http://betterexplained.com/articles/speed-up-your-javascript-load-time/
http://www.rubyrobot.org/article/5-tips-for-faster-loading-web-sites
http://betterexplained.com/articles/how-to-optimize-your-site-with-gzip-compression/
http://www.gidnetwork.com/tools/gzip-test.php
http://www.pipeboost.com/
http://www.schroepl.net/cgi-bin/http_trace.pl
http://leknor.com/code/gziped.php?url=http%3A%2F%2Fwww.google.com
http://www.port80software.com/surveys/top1000compression/
http://www.rexswain.com/httpview.html
http://www.15seconds.com/issue/020314.htm
http://www.devwebpro.com/devwebpro-39-20041117DevelopingYourSiteforPerformanceCompressionandOtherServerSideEnhancements.html
http://www.webpronews.com/topnews/2004/11/17/developing-your-site-for-performance-optimal-cache-control
http://www.sitepoint.com/print/effective-website-acceleration
http://nazish.blog.com/1007523/
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/IETechCol/dnwebgen/IE_Fiddler2.asp?frame=true
http://www.fiddlertool.com/fiddler/version.asp
http://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html
http://www.web-caching.com/cacheability.html
http://www.edginet.org/techie/website/http.html
http://www.cmlenz.net/blog/2005/05/on_http_lastmod.html
http://www.websiteoptimization.com/speed/tweak/cache/
http://www.webperformance.org/caching//caching_for_performance.html
http://betterexplained.com/articles/how-to-debug-web-applications-with-firefox/
Edited by tkoenings at 06/18/2007 6:26 AM

Hi Scott,
Does Weblogic platform 8.1 supports netscape? We have developed a portal which
works perfectly on IE but it dies in netscape. Is netUI tags not supported in
Netscape?
Pls reply
manju
Scott Dunbar <[email protected]> wrote:
From a pure HTML perspective Portal does it's rendering with nested
tables.
Netscape 4.x and below have terrible performance with nested tables.
The
problem is not the Portal server but rather Netscape on the client machine.
If IE and/or a recent version of Netscape/Mozilla is not possible then
there are
really only two options:
1) Faster client hardware - not likely to be an acceptable solution.
2) Minimize the number of portlets and the complexity within the portlets.
Neither of these solutions are a great answer, but the 4.7 series of
Netscape is
getting pretty old. Having said that, we've got customers who want to
continue
to use IE 4 :)
Again, though, this problem is, I'm afraid out of our hands. It is the
client
rendering time that is the issue.
cg wrote:
Does anyone know of any known reasons why the 7.0 (did it also with4.0) portal
pages can take up to almost 30 seconds to load in Netscape 4.7? I knowit is a
very generic question but our customer still uses 4.7 and will notuse the portal
b/c it takes so long to load some of the webapps. What the pages willdo when
loading is that the headers will come up and when it gets to the bodyof the page
it seems to stall and then comes up all of a sudden. For some of thepages it
takes 6 seconds and for others it takes about 24-27 seconds.
We have suggested using IE only but that is not an option with allof the customers
and getting a newer version of Netscape is also out of the question.
Any suggestions would be greatly appreciated.--
scott dunbar
bea systems, inc.
boulder, co, usa

Getting HTTP Headers

I'm new to Flex. I'm an ASP.Net developer. We have an ASP.Net application that gets information about the user in http headers. Can a Flex app get info from http headers?

Ok, i filed an enhancement CR103654.
I am not sure when this will be fixed.
Please contact support if you need an urgent fix.
regards,
-manoj
"Steve Watson" <[email protected]> wrote in message
news:3e9d765b$[email protected]..
>
This could work, but we want to distinguish between the different codesespecially
500, 502, and 503.
Steve
"manoj cheenath" <[email protected]> wrote:
There is no API in Web service client to get HTTP response
code. This is because, the web service client can be invoked
using other protocols.
If the return code is not 2XX, then the run time will throw
exception. Will that help?
-manoj
"Steve Watson" <[email protected]> wrote in message
news:[email protected]..
I am coding an asycronous web services client and need to check thestatus
code
in the HTTP response. How can I do this?
Steve Watson

Setting HTTP Headers

Hi,
How do I set/add the HTTP headers in the webservice soap client(Call object)?
Any pointers/code samples will be of good help.
Regards
Kumza

Hi,
I have the same problem and I have tried your solution but the problem persists.
The point is that, in my case, getMessage() returns NULL so I cannot set the header.
Any idea or suggestion?
Thank you very much in advance.
Juan

How to change my client push installation version

I have one primary site server. I have updated it to 5.00.7958.1401 and this is the version shown if i check "about system center configuration manager".
When i push the client to machines by right clicking and choosing "install client"...SCCM installs client version 5.00.7958.1000.
How can I change it so my client push installs the CU3 version 1401?
Thanks

If you were to mess with the files in the client folder of the site server's installation path, you would place your self in an unsupported state, though this is simple...
how about using the PATCH parameter for ccmsetup.exe? You could configure it in the Client Push Installation / Installation Properties tab...
http://thecmadmin.com/2013/08/01/installing-cumulative-update-2-cu2-for-cm12-sp1-during-initial-client-install/
other reference:
http://blogs.technet.com/b/deploymentguys/archive/2012/10/11/automatically-populate-the-patch-property-for-the-configmgr-client-installation-updated-for-configmgr-2012.aspx

Modify HTTP Headers with FileServlet?

When I use netscape as a webserver, we can specify HTTP headers that go out
on all the static content to insure that it is cached on the client for at
least a few minutes...
Does anyone know how to do that with WLS?
The exact header:
Cache-control: max-age=36000
this is the context:
HTTP/1.1 200 OK
Server: Netscape-Enterprise/4.1
Date: Mon, 10 Sep 2001 23:46:53 GMT
Cache-control: max-age=36000
Content-type: image/gif
Etag: "c1153a1a-1098-2b-3b9933f8"
Last-modified: Fri, 07 Sep 2001 20:54:16 GMT
Content-length: 43
Accept-ranges: bytes
This is how we get it in netscape:
<Object ppath="/usr/netscape/server4/docs/sqa/images/*">
PathCheck fn="set-cache-control" control="max-age=36000"
</Object>

you can access the SOAP headers in the call, but I don't think the HTTP headers are directly available.
MAriano Benitez
Join us at BEAParticipate, May 6-9 2007 | Atlanta, Georgia

How to create cross-client variant?

Hi Experters:
Can someone tell me how create cross-client variant in ECC6.0?
in 4.6, we can define the client or define cross-client transaction variant,
how to create cross-client variant in ECC6.0?
Regareds,

Hi,
In se93 there is a check box cross-client .
The Cross-client switch identifies which transaction variants are cross-client and which are client-specific. If the switch is set, the transaction variant is cross-client. If the switch is not set, the transaction variant is client-specific.
A client-specific transaction variant can only exist in the client where it was created. The field contents of the transaction variant only have to be available in the particular client. A cross-client transaction variant is available in the system regardless of which client is currently active. The field contents of the transaction variant have to be available in all clients.
http://****************/Tutorials/ABAP/TransactionVariant/Create.htm

How to filter the Rest Api data based on Taxanomy columns

Hi Everyone,
We are using SharePoint2010 Standard Edition.
I wanted get the library details through REST Api. I am using as below:
https://SiteUrl/_vti_bin/listdata.svc/Documents?$filter=Title eq 'SharePointDoc'
Here I am able to get the info regarding "SharePointDoc". But when I am trying to get the details from Taxonomy filter, it didn't.
Can anyone please tell me how can we filter based on Taxanomy fields.
Thanks in Advance
Krishnasandeep

Hi,
I understand that you wanted to filter the Rest Api data based on Taxanomy columns.
Per my knowledge, in SharePoint 2010 , not all types of column are available via REST, most annoyingly managed metadata columns are amongst this group of unsupported column types.
However, in SharePoint 2013, we can filter list items based on taxonomy (managed metadata) columns.
Taxonomy fields can be now called via REST API using CAML query in REST calls.
Here is a great blog for your reference:
http://www.cleverworkarounds.com/2013/09/23/how-to-filter-on-a-managed-metadata-column-via-rest-in-sharepoint-2013/comment-page-1/
You’d better to change the REST calls and the CAML query to check whether it works in SharePoint 2010.
More information:
http://platinumdogs.me/2013/03/14/sharepoint-adventures-with-the-rest-api-part-1/
Best Regards,
Linda Li
Linda Li
TechNet Community Support

How do I create a Https Proxy server

hi,
I am writing a Proxy server in java. But my pogram do not support https protocol.Could you please tell me how can I implement a https proxy server.some sample code is more helpful.
This is very URGENT for me.
Thanks
Sujith Varghese

Hi Varghese,
Reading the thread I am able to make out u r facing the same problem as I do.
current scenario#1:
Machine#1 client (using URLConnection("https://...") ----> Machine#2 (Server https port)
what I want scenario#2
Machine#3 client (using URLConnection("https://...") ---> Machine#1 (Proxy for https)----> Machine#2 (Server https port)
In scenario#1
- I have a Client machine at Location#1 which can connect to on Location#2
- I only have SSH connection to machine at Location#1
now this scenario#2 is what I would like to run so that
- I am able to connect to mc#2 at loc#2 from a machine at loc#3 with mc#3
- effectively starting a https proxy at location number mc#1 at loc#1.
Hope that clears the problem domain.
any help will be greatly appreciated.
regards-
_Jagsir

How to Filter Initial Client HTTP Headers on a CSS11506 SSL module

Similar Messages

Maybe you are looking for