Issue 32935

Summary: opening webdav documents over https doesn't work
Product: ucb Reporter: bryancole <bryan.cole>
Component: codeAssignee: rvojta
Status: CLOSED DUPLICATE QA Contact: issues@ucb <issues>
Severity: Trivial    
Priority: P3 CC: issues, josua, pavel.lastovicka, rvojta
Version: OOo 2.0.4   
Target Milestone: not determined   
Hardware: All   
OS: All   
Issue Type: ENHANCEMENT Latest Confirmation in: ---
Developer Difficulty: ---

Description bryancole 2004-08-13 10:48:35 UTC
OpenOffice doesn't allow access to WebDAV documents over the https (encrypted)
protocol. Presumably, this means passwords to webdav servers are passed as
cleartext (or equivalent) i.e. insecure.
Comment 1 michael.ruess 2004-08-13 11:09:55 UTC
reassigned to framework.
Comment 2 thorsten.martens 2004-08-13 12:54:49 UTC
TM->BH: We don´t support HTTPS. So this is not a defect but might be a wish for
an enhancement. Please have a look.
Comment 3 bubeck 2004-09-18 23:40:34 UTC
If you decide NOT to implement HTTPS (but please do), then at last show an info
box telling the user, that there is no support for https.

The current situation is, that pressing "Open" shows a pressed button going down
and released but nothing happens. You could then press the button over and over
again, without any change. 

At least show a note.
Comment 4 oberger 2004-10-13 12:54:55 UTC
I'd like to confirm that this is really an interesting feature in order to use
DAV safely : DAV without SSL is not really to advise, at least for real office
use, so what's good with DAV support if you can't use it over SSL ?
Comment 5 wesyah234 2006-09-13 02:45:43 UTC
I'd also like to comment that this would be great if it could be changed to
support https.  As the previous comment states, saving documents over non secure
webdav is quite a bad idea, since not only is the document passed unencrypted,
but your login credentials as well.  Enabling secure webdav access would be a
way to compete more strongly with free online office suites like ThinkFree
http://www.thinkfree.com/.  Interestingly, a search for "free office" on google
yields openoffice in the top spot, and thinkfree.com in the number 2 spot... 
Please vote for this!
Comment 6 wesyah234 2006-09-13 02:47:29 UTC
*** Issue 32935 has been confirmed by votes. ***
Comment 7 tguthmann 2006-10-30 10:37:31 UTC
We are a university and all of our web services are delivered via https. So what
a surprise when we discovered that OOo 2.0.3 cannot open webdav/https document...

Am I wrong or is this issue still true ? 

Comment 8 rvojta 2006-11-20 06:17:56 UTC
This issue is still valid with the latest stable release. I wonder why this
important feature is not implemented yet. But anyway, I have couple of questions:

 - did I miss this feature in development releases?
 - anyone is working on https support for WebDAV?
 - if not, I would like to implement it, any comments, hints, ...?
Comment 9 rvojta 2006-11-20 12:21:29 UTC
I'm taking over of this issue. Kai just answered my questions at

 o http://ucb.openoffice.org/servlets/ReadMsg?list=dev&msgNo=336
Comment 10 rvojta 2006-11-20 12:22:12 UTC
Starting work on it ...
Comment 11 tkr 2007-08-31 10:22:15 UTC
Robert, are you still working on it?

Since I'm working at the same topic (Issue i31053) i will mark this issue as
duplicate if you don't 
Comment 12 pavel.lastovicka 2007-09-06 10:12:16 UTC
Hello tkr, I have ready patches, currently against OOF680-m18. I took over 
robert's work. I wanted to learn CWS, and use this fixes for my first CWS.

The trouble is I am leaving for a 1,5 month long vacation probably on 
September 10th. Do you hurry with a fix for this issue?
Comment 13 rvojta 2007-09-06 10:23:04 UTC
RVOJTA->TKR: No, I'm not working on this feature for a few weeks. I left the 
OpenOffice.org development because of lack of time. Feel free to do whatever 
you want with this issue.
Comment 14 rvojta 2007-09-06 10:26:33 UTC
P.S. If you want to see my hack to have SSL working on Windows and Linux, let 
me know. This hack uses openssl binaries (Windows, Linux) or system openssl 
libraries (Linux). It works pretty well, but lot of missing features 
(certificates handling) and it needs to be polished.
Comment 15 tkr 2007-09-06 14:06:51 UTC
The target for this issue is OOo 2.4, so we can't wait until end of October.

Feel free to send me your patches and hacks and I will try to fit them in my
concept.


*** This issue has been marked as a duplicate of 31053 ***
Comment 16 tkr 2007-09-06 14:08:04 UTC
closed as duplicate