Fwd: ApplicationSecurity Questions

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Fwd: ApplicationSecurity Questions

hernanmd
FYI

---------- Forwarded message ----------
From: Hernán Morales Durand <[hidden email]>
Date: 2018-06-13 13:44 GMT-03:00
Subject: Re: ApplicationSecurity Questions
To: Sean DeNigris <[hidden email]>


Hi Sean,

Sorry for the delayed reply, almost no time for anything here

2018-06-08 10:20 GMT-03:00 Sean DeNigris <[hidden email]>:
> You can check a project making use of ApplicationSecurity here:
> http://www.smalltalkhub.com/#!/~hernan/IGEVET
>
>

Ok, I load it using:

Gofer it
   smalltalkhubUser: 'hernan' project: 'IGEVET';
   configurationOf: 'IGEVETWebSite';
   loadDevelopment.

> Pharo 6.1:
> - No #development version for Iliad, had to add to ConfigurationOfIliad
> - ConfigurationOfNacl - had to comment out #preload, which failed to
> download libsodium (apparently the dropbox link no longer works). I was able
> to procure the library elsewhere

I checked and ApplicationSecurity baseline was broken, missing some
dependencies.
Now I've fixed the BaselineOfApplicationSecurity to include the
ConfigurationOfNacl (https://github.com/hernanmd/ApplicationSecurity)
and PBKDF2 from Configuration, so includes the Fortuna and
SecureRandom classes. All Nacl tests passes at least on Windows.

If you're loading ConfigurationOfNacl-HernanMoralesDurand.36 then
#platformLibraryUrl contains the URLs which points to:
https://github.com/hernanmd/NacL/tree/master/res


> - ERROR: DNU #selector from RBParser >>#externalFunctionDeclaration when
> trying to parse:
>
> apiDeleteDC: aHDC
> <apicall: bool 'DeleteDC' (Win32HDC) module:'gdi32.dll'>
> ^self externalCallFailed
>

IIRC that happens when you load a package with primitive syntax/format
for a different version of Pharo.

>
> Pharo 5:
> - ConfigurationOfNacl - had to comment out #preload, which failed to
> download libsodium (apparently the dropbox link no longer works). I was able
> to procure the library elsewhere
> - BioFormatters-HernanMoralesDurand.118 complained about missing PMVector,
> clicked proceed and no more problems
>

I don't have time to try it or support it in Pharo 5 now :(

> Since I’m not familiar with Iliad, I wasn’t sure how to run the app.

I wrote a Control Panel for Iliad some time ago. It should be
accessible from the World Menu. It works pretty much like the Seaside
one, plus some minor features, including a Session Browser.

> manually executed IGEVETApplication>>#startUp to get the server going, but
> wasn’t sure what URL to type into the browser. I tried a few things that all
> returned 404 like:
> - http://localhost:9999/IC
> - http://localhost:9999/chromopainter-jobs
> - http://localhost:9999/IC/chromopainter-jobs
>

Add an adaptor using the Control Panel then go to:

http://localhost:8888/main

> Also from my previous reply (not sure if you saw it):
>
> Out of curiosity, why Iliad instead of Seaside? Would Iliad be your
> default/recommendation for new web apps?
> Is it well-supported/maintained? It doesn’t seem to have much recent
> activity unless I’m looking at the wrong repo.
>
>
> Thanks!
>
> - s

Thank you for the feedback.
Please let me know how it is going,

Cheers,

Hernán