search

OEHU / oehu-website

The OEHU website, as can be seen on https://oehu.org/ |
https://oehu.org/
4 stars 2 forks source link

Setup should be able to call the OEHU setup API #8

Closed bartwr closed 5 years ago

bartwr commented 6 years ago

I follow the steps in https://oehu.org/setup. In step 4 my seed phrase is not displayed.

image

Expected behaviour

In step 4 my seed phrase is displayed.

Actual behaviour

My seed phrase is not displayed in step 4. Instead, an error is shown in the console.

The browser cannot load the http-link http://oehu.local:8000/... from https-page https://oehu.org, because this would end up in having mixed content.

Possible solution

  1. Create a self signed SSL certificate on the Raspberry Pi

  2. In the oehu-setup-api folder on the Pi, run the http server with this SSL certificate

    sudo http-server . -p 443 --ssl --cert "cert.pem" --key "key.pem"

This issue can be closed if the setup page can access the OEHU setup API without any problems.

bartwr commented 6 years ago

I found it difficult to make the local running oehu.local SSL enabled without the need of additional user interaction.

For now I'm going to disable SSL for oehu.org. API calls with confidential information are still done by using https://api.oehu.org, therefor safe.

This issue remains open until we have SSL for the locally running oehu.local.

bartwr commented 5 years ago

We did not disable SSL for api.oehu.org, because - êh.

From now the oehu-website runs on the Raspberry Pi. Therefor the local oehu-site (http) can access the local oehu-setup-api (http as well).

=> SOLVED