By default, Fill PDF communicates with the service over the http protocol. This probably makes it a no-go for many businesses dealing with highly-personal information. The service now has a CA-issued SSL certificate, so I'm going to add an option to communicate with the service in SSL. This may become the default if I don't receive any issues surrounding it.

CommentFileSizeAuthor
#3 fillpdf_1167940_port_ssl_support.patch1.33 KBwizonesolutions
#1 fillpdf_1167940_ssl_support.patch1.37 KBwizonesolutions

Comments

wizonesolutions’s picture

wizonesolutions
he/him
Primary language English
Location Norway
commented
Status: Active » Patch (to be ported)
StatusFileSize
new fillpdf_1167940_ssl_support.patch1.37 KB

Done! This should be secure even if the calling site isn't, since the server will send the response over the wire as part of the SSL connection. Someone let me know if I'm wrong here.

This is implemented via a new "Use SSL" option in the admin and has been pushed to dev.

wizonesolutions’s picture

wizonesolutions
he/him
Primary language English
Location Norway
commented
Version: 6.x-1.x-dev » 7.x-1.x-dev
wizonesolutions’s picture

wizonesolutions
he/him
Primary language English
Location Norway
commented
Status: Patch (to be ported) » Fixed
StatusFileSize
new fillpdf_1167940_port_ssl_support.patch1.33 KB

Ported! There's one more non-patch to port and then there will be a new official release.

Patch attached; requires previous patches (see issues referenced in recent commits).

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

  • Commit be5b31e on 7.x-1.x, 7.x-2.x, 7.x-2.x-tests1, 7.x-1.x-ubercartbackporttest by wizonesolutions: 
    Issue #1167940: Add SSL option for remote service method.
wizonesolutions’s picture

wizonesolutions
he/him
Primary language English
Location Norway
commented
Assigned: wizonesolutions » Unassigned
Issue summary: View changes