Agent download over HTTPS?

[CChong]

I'm trying to setup HTTPS for the InstallShield update service site we're running. We need to do so, due a customer requirment that ALL web servers run HTTPS, no matter what. I was able to receive the update notification correctly, but when I call Download on the update object it returns VARIANT_FALSE.

Just wondering if it has been tested & does or does not work over HTTPS? Maybe I'm doing something incorrectly...?


Thanks!

[Chris_Woerner]

We had several requests to secure the downloading of files, so the Agent can download updates over both HTTP and HTTPS.

However no one has asked for the communication between the Agent and Notification server to be secure as the data that is being passed is not highly sensitive (product code/ version code). Having said that, I am open to adding HTTPS if there is a need.

[CChong]

Kind of confused, because I am in fact securing the notificaiton site and the agent is able to enumerate updates from a secure notification server.

so, in psuedo-code


agent->SetHost("https://123.123.123.123")

// this works
agent->EnumUpdates("{123-xyz}")

// Note : Update location =
// https://123.123.123.123/Update/myupdate.exe
// this call fails for me
update->Download()

Does that sound correct, maybe I interpretted your response incorrectly?

[Sunny_s]

I am not surprised that Notification server worked under https:// for you, at the same time, we have not offically certified Notifcation server working under https://

However, I am little concerned that you are not able to download a file using https://. Can you please share more information about your update like download location. If you like, you can share above information through private email.

[CChong]

The location is actually a server that's internal to our Intranet for development.... so I can't really point you at it.

[CChong]

One more thing I should point out, I'm using a sort of "test certificate" from my own CA, therefore I get the pop-up box saying "Untrusted certificate, ok to continue... blah blah" which I click "Yes" to. This works for receiving notifications, I'm wondering if maybe somehow that's messing up the download though?

[CChong]

I actually gave everything a try again... and it worked. I may have configured something on the web server incorrectly when I had tried before. So I can in fact get notifications & download over HTTPS. Sorry for the false alarm!

THanks!