insecure SSL connection ... :cry:

[s_jeho]

* See: https://ibin.co/3BSZZurbVnUQ.png

Code: Select all

Hypertext Transfer Protocol
    HTTP/1.1 302 Found\r\n
    Content-Length: 0\r\n
        [Content length: 0]
    Location: https://***.***.***.***:443/rest/ping.view?v=1.0.0&c=iSub&u=<username>&p=<password>&\r\n
    Server: Jetty(6.1.x)\r\n
    \r\n
    [HTTP response 1/1]
    [Time since request: 0.000943742 seconds]
    [Request in frame: 161]


Ok... can anybody know about this? or explain? AND IT WAS SSL CONNECTION!
I'm so confuse and afraid about this... I have not known for N years.

I'm using iphone client, if you're using android client, please check your self.

[s_jeho]

It was client app's fault.

* See: http://www.subsonic.org/pages/api.jsp

If your targeting API version 1.12.0 or earlier, authentication is performed by sending the password as clear text or hex-encoded. Examples:

Code: Select all

http://your-server/rest/ping.view?u=joe&p=sesame&v=1.12.0&c=myapp
http://your-server/rest/ping.view?u=joe&p=enc:736573616d65&v=1.12.0&c=myapp


Starting with API version 1.13.0, the recommended authentication scheme is to send an authentication token, calculated as a one-way salted hash of the password.

How can i fix it?
if there is no way, DO NOT USE isub Client.
http://www.subsonic.org/pages/apps.jsp#isub