Loading cesium over https

[Scott Haynes]

I'm trying to load our VWF Cesium application over https( over the company network, we're using websockets, so we had to move to https).  Is there a version of the content that can be served out via https?

Link:

https://virtualworldframework.com/agi/cesium

Thanks,

Scott

[blocked] The page at 'https://virtualworldframework.com/agi/cesium/00c9659423a6533d/' was loaded over HTTPS, but ran insecure content from 'http://dev.virtualearth.net/REST/v1/Imagery/Metadata/Aerial?key=AkMnCOd4RF1U7D7qgdBz3Fk1aJB3rgCCI_DO841suDGxqOg0SMICTE8Ivy5HhAf5&jsonp=jsonp847160': this content should also be loaded over HTTPS. (index):1

An error occurred in "r": cesium.js:715

An error occurred while accessing http://dev.virtualearth.net/REST/v1/Imagery/Metadata/Aerial?key=AkMnCOd4RF1U7D7qgdBz3Fk1aJB3rgCCI_DO841suDGxqOg0SMICTE8Ivy5HhAf5. cesium.js:715

[Kevin Ring]

Hi Scott,

There's no out-of-the-box way to do it unfortunately, but it's easy to do by changing the BingMapsImageryProvider.  You just need to replace 'http' with 'https'.  Here's a hacky but working approach:

Change BingMapsImageryProvider.js, around line 128 to look like this (new line in bold):

var metadataUrl = this._url + '/REST/v1/Imagery/Metadata/' + this._mapStyle.imagerySetName + '?key=' + this._key;

metadataUrl = metadataUrl.replace('http:', 'https:');

var that = this;

And around line 412:

var url = buildImageUrl(this, x, y, level);

url = url.replace('http:', 'https:');

return ImageryProvider.loadImage(this, url);

I had hoped that just passing in a new URL with 'https' to the BingMapsImageryProvider would do the trick.  But unfortunately the result of the Bing Maps metadata service still includes http URLs even if accessed via https.

Kevin

--
You received this message because you are subscribed to the Google Groups "cesium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cesium-dev+...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

--

www.kotachrome.com/kevin

[Scott Hunter]

It looks like Bing Maps supports HTTPS for their imagery metadata service.  Try constructing your BingMapsImageryProvider and passing in:

url: 'https://dev.virtualearth.net'

instead of the default HTTP URL.

On Wed, Jan 22, 2014 at 10:03 AM, Scott Haynes <scottn...@gmail.com> wrote:

[Kevin Ring]

Yep, that was the first thing I tried.  Sadly the imageryUrl returned in the metadata response is still http.

--

www.kotachrome.com/kevin

[Scott Haynes]

What if the code in the first reply added a check for the current protocol prior to swapping from http to https?

This has actually been an issue for months, so we don't necessarily need an immediate fix.  I could even fix it and issue a pull request if that's better.

Scott

[Kevin Ring]

A robust solution would check for https in the metadata URL (but not add it), and if the metadata URL is https, it would change http to https in the _imageUrlTemplate inside the metadataSuccess function.  If you do this I would definitely appreciate a pull request!

[Scott Haynes]

Do you have a webpage that describes your pull request process?  Just create a branch with the fix and submit a PR?

Scott

[Kevin Ring]

That's right.  You can find more information here:

https://github.com/AnalyticalGraphicsInc/cesium/blob/master/CONTRIBUTING.md

Probably the main thing, other than what you've already said, is that we need a signed Contributor's License Agreement from you or your organization.  You can do that just by emailing it to us.  Instructions are above.  The CLA essentially says that you own your contributions and that we're allowed to use them.

Thanks for doing this!

Kevin

[Chris Cooper]

In case it hasn't been tried, you may be able to do this without code logic by changing hardcoded URLs in Cesium to this form...

//dev.virtualearth.net

as is common practice when using CDNs...

http://blog.jonathanoliver.com/2010/09/http-and-https-with-google-cdn/

Please let us know how you go.

[Kevin Ring]

Ah, yes, I always forget about that trick.  Good idea.  We'll still need the hack to modify the URLs coming back from the Bing Maps metadata service, though, since those have http hardcoded.  But rather than changing http to https, we should remove the "http:" entirely.