Flash sometimes doesn't like SSL

I found a strange problem recently.  Using Gallery I could always upload new pictures but someone else using Vista could not upload any pictures.  It didn’t matter if she used IE or Firefox, every single upload made Gallery come up with error #2038 (IO). I could say that anyone that uses Vista deserves everything they get, but that would be a little churlish (if true).

A few searches showed that this basically gallery saying “something bad happened with your upload”. No, really? You mean it’s not supposed to be a big red box and no uploaded file?  It’s not the world’s most useful error message.

What got me onto the right path was a message on the gallery forums though it was the other way around. Gallery uses a flash uploader which and this is the same flash if you use Firefox or IE.  It seems it doesn’t like “strange” SSL certificates, such as chained certificates like that site uses (and my site too).  No doubt there is probably some work-around or setting to fix it, but being Vista its probably buried in 20 menu items under some obscure reference.

Setting up the gallery under a non-ssl site fixed it. Perhaps more correctly it was a work-around.

Enhanced by Zemanta


2 responses to “Flash sometimes doesn't like SSL”

  1. One more reason to dump Flash and SSL PKI. Switch to HTML5 and Monkeysphere.

    1. The problem with both flash and SSL is they’re “good enough”. They certainly have their limitations and I’m looking forward to HTML5 to solve some of them.

      Monkeysphere I tried and had a lot of problems with. It would lock up the browser while it struggled through the keys, for example. It could be because I have such a large keyring. It’s a great idea where the implementation falls short which is a real shame.

      For those that don’t know, Monkeysphere Project is using GPG keys for TLS/SSL. So instead of a very small number of Certification Authorities telling you what websites are ok, it uses a web of trust model like you use for GPG.

Leave a Reply

Your email address will not be published. Required fields are marked *