ODK Collect with Basic / Digest Authentication

Support
1

Hi,

We want to use ODK collect with our website exposing url for x-forms.

We are facing some problems getting around the authentication.

Our entire website (production environment) is on https so we should be
good to go with Basic authentication. But none of the other environments
are on https (dev / QA / staging).

When I looked into the ODK collect code, I found out that basic auth
is allowed only on the standard TLS/SSL ports. I tried setting up my local
box with self-signed certificate but ODK collect fails with the message "No
peer certificate".
Is there any other way of testing the same?
OR Do we have to have a genuine certificate on one of the environments?

Would really appreciate your help on this.

Thanks.

2

Anirudha,

There is no need to cross-both lists. Also, please search first the
lists and issue tracker before posting.

The easiest way to solve this problem is to get a "genuine"
certificate. GeoTrust is likely the most inexpensive option. See
https://groups.google.com/group/opendatakit-developers/browse_thread/thread/7777c8e71eaf53fb
for a related problem.

The harder way is to create a new version of Collect that supports your cert.
http://code.google.com/p/opendatakit/issues/detail?id=279&can=1&q=self-signed

Yaw

··· On Wed, Apr 18, 2012 at 23:32, Anirudha Ravindra Ghante wrote: > Hi, > > We want to use ODK collect with our website exposing url for x-forms. > > We are facing some problems getting around the authentication. > > Our entire website (production environment) is on https so we should be good > to go with Basic authentication. But none of the other environments are on > https (dev / QA / staging). > > When I looked into the ODK collect code, I found out that basic auth > is allowed only on the standard TLS/SSL ports. I tried setting up my local > box with self-signed certificate but ODK collect fails with the message "No > peer certificate". > Is there any other way of testing the same? > OR Do we have to have a genuine certificate on one of the environments? > > Would really appreciate your help on this. > > Thanks. > > -- > Post: opendatakit@googlegroups.com > Unsubscribe: opendatakit+unsubscribe@googlegroups.com > Options: http://groups.google.com/group/opendatakit?hl=en
3

Thanks a lot for your help Yaw !!!
And apologies for posting on both the lists.

For now, we are running our server on port 8443, just for development.
This seems to be working fine.

··· On Apr 19, 6:22 pm, Yaw Anokwa wrote: > Anirudha, > > There is no need to cross-both lists. Also, please search first the > lists and issue tracker before posting. > > The easiest way to solve this problem is to get a "genuine" > certificate. GeoTrust is likely the most inexpensive option. Seehttps://groups.google.com/group/opendatakit-developers/browse_thread/... > for a related problem. > > The harder way is to create a new version of Collect that supports your cert.http://code.google.com/p/opendatakit/issues/detail?id=279&can=1&q=sel... > > Yaw > > On Wed, Apr 18, 2012 at 23:32, Anirudha Ravindra Ghante wrote: > > Hi, > > > We want to use ODK collect with our website exposing url for x-forms. > > > We are facing some problems getting around the authentication. > > > Our entire website (production environment) is on https so we should be good > > to go with Basic authentication. But none of the other environments are on > > https (dev / QA / staging). > > > When I looked into the ODK collect code, I found out that basic auth > > is allowed only on the standard TLS/SSL ports. I tried setting up my local > > box with self-signed certificate but ODK collect fails with the message "No > > peer certificate". > > Is there any other way of testing the same? > > OR Do we have to have a genuine certificate on one of the environments? > > > Would really appreciate your help on this. > > > Thanks. > > > -- > > Post: opendatakit@googlegroups.com > > Unsubscribe: opendatakit+unsubscribe@googlegroups.com > > Options:http://groups.google.com/group/opendatakit?hl=en