ticgal / one-timesecret

A One-Time Secret integration with GLPI
https://tic.gal/en/project/a-one-time-secret-integration-share-your-passwords-securely/
GNU Affero General Public License v3.0
3 stars 4 forks source link

Plugin not working #15

Closed boscorelly closed 2 years ago

boscorelly commented 2 years ago

Hi,

maybe it's the same issue as in #11

i can't get the url plugin to work.

`Error: Warning: curl_getinfo(): supplied resource is not a valid cURL handle resource in D:\xampp-7-4-14\htdocs\glpi\marketplace\onetimesecret\inc\secret.class.php on line 102

Notice: Trying to access array offset on value of type null in D:\xampp-7-4-14\htdocs\glpi\marketplace\onetimesecret\inc\secret.class.php on line 106

Notice: Undefined variable: lang in D:\xampp-7-4-14\htdocs\glpi\marketplace\onetimesecret\inc\secret.class.php on line 180

Notice: Undefined variable: lang in D:\xampp-7-4-14\htdocs\glpi\marketplace\onetimesecret\inc\secret.class.php on line 181

Notice: Undefined variable: lang in D:\xampp-7-4-14\htdocs\glpi\marketplace\onetimesecret\inc\secret.class.php on line 182

Notice: Undefined index: itemtype in D:\xampp-7-4-14\htdocs\glpi\inc\itilfollowup.class.php on line 338`

architecture is : glpi server <> reverse proxy iis <> firewall <> internet

boscorelly commented 2 years ago

# curl -u "_user_:_key_" https://ots._domaine_.fr/api/v1/status {"status":"nominal","locale":"en"}

boscorelly commented 2 years ago

ok i found the issue : the http protocol is hardcoded. In consequence, adding https in server url break it.

OscarBeiro commented 2 years ago

Hi, We are trying to send sensitive information securely. I think we can both agree using http is not a good idea :) Cheers,

boscorelly commented 2 years ago
    Yes but http(s):// must be stripped from post

 De : Oscar B. @.***>Envoyé : jeudi, février 24, 2022 3:16 PMÀ : ticgal/one-timesecretCc : Camille Ollié; State changeObjet : Re: [ticgal/one-timesecret] Plugin not working (Issue #15)  Hi, We are trying to send sensitive information securely. I think we can both agree using http is not a good idea :) Cheers,

—Reply to this email directly, view it on GitHub, or unsubscribe.Triage notifications on the go with GitHub Mobile for iOS or Android. You are receiving this because you modified the open/close state.Message ID: @.***>

OscarBeiro commented 2 years ago

It Call me lazy, but it will be easier to change the string to add this information :)