<div>Please take a look here https://github.com/aerogear/aerogear-unifiedpush-server/commit/44697970010cbdb416e217f0eaa8d6e597e8b740<br><br>SSLv3 is vulnerable to POODLE.</div>
<div class="mailbox_signature">
<br>—<br><br>abstractj<br>PGP: 0x84DC9914</div>
<br><br><div class="gmail_quote"><p>On Wed, Nov 5, 2014 at 10:13 PM, mutulong <span dir="ltr"><<a href="mailto:mutulong@hotmail.com" target="_blank">mutulong@hotmail.com</a>></span> wrote:<br></p><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><p>I am using curl to test my unifiedpush server setup, I had to turn off curl
<br>performing SSL certificate verification by add -k argument in the command.
<br><br>This is the command:
<br><br>curl -k -3 -u
<br>"cd085f44-4920-4164-92d8-1965ea163885:8d9e903a-8ff1-4048-b0c6-11f5c78efcbc"
<br>-v -H "Accept: application/json" -H "Content-type: application/json" -X POST
<br>-d '{"message": {"alert":"Hello baby this is a test breaking news haha
<br>world! ab.co/1oNOpx9", "url":"ab.co/1oNOpx9"}}'
<br>https://dymamic.com:28443/ag-push/
<br><br>And this is the result:
<br><br>* Hostname was NOT found in DNS cache
<br>* Trying 54.201.126.209...
<br>* Connected to dymamic.com (54.201.126.209) port 28443 (#0)
<br>* SSL 3.0 connection using SSL_NULL_WITH_NULL_NULL
<br>* Server certificate: luke du
<br>* Server auth using Basic with user 'cd085f44-4920-4164-92d8-1965ea163885'
<br>> POST /ag-push/ HTTP/1.1
<br>> Authorization: Basic
<br>> Y2QwODVmNDQtNDkyMC00MTY0LTkyZDgtMTk2NWVhMTYzODg1OjhkOWU5MDNhLThmZjEtNDA0OC1iMGM2LTExZjVjNzhlZmNiYw==
<br>> User-Agent: curl/7.37.1
<br>> Host: dymamic.com:28443
<br>> Accept: application/json
<br>> Content-type: application/json
<br>> Content-Length: 113
<br>>
<br>* upload completely sent off: 113 out of 113 bytes
<br>< HTTP/1.1 405 Method Not Allowed
<br>< Connection: keep-alive
<br>< X-Powered-By: Undertow/1
<br>* Server WildFly/8 is not blacklisted
<br>< Server: WildFly/8
<br>< Content-Type: text/html;charset=ISO-8859-1
<br>< Content-Length: 104
<br>< Date: Thu, 06 Nov 2014 00:09:56 GMT
<br><
<br>* Connection #0 to host dymamic.com left intact
<br><html><head><title>Error</title></head><body>HTTP method POST is not
<br>supported by this URL</body></html>
<br><br>I am kind stuck here, could anyone please help me on this, thanks a lot.
<br><br><br><br>--
<br>View this message in context: http://aerogear-dev.1069024.n5.nabble.com/HTTP-method-POST-is-not-supported-by-this-URL-tp9772.html
<br>Sent from the aerogear-dev mailing list archive at Nabble.com.
<br>_______________________________________________
<br>aerogear-dev mailing list
<br>aerogear-dev@lists.jboss.org
<br>https://lists.jboss.org/mailman/listinfo/aerogear-dev
<br></p></blockquote></div><br>