offliner | bringing offline web applications through service workers | Frontend Framework library

solved by add function for this data file :

Exactly same question I asked here https://community.cloudflare.com/t/manual-authenticated-origin-pulls-verification/145614. Dunno why, but A27996CBA564D24731BC76439C48920C1F7D4AA3 it's correct.

EDIT: Update with chain

Well, no answers. Ok.

So if anyone is interested I explain how I've solved it. Basically, with a "rodeo":

• There is no way to alter the serviceworker functionality (as it is a 3rd party SW, which I cannot edit).
• So the only way is to "avoid cache" everytime, with "cache: false" on every ajax call.
• This way SW cannot serve an "offline" version of the page, and I do not receive the real page (cached, but real) everytime even if online.
• So instead on recalling to .done() and .fail(), everything goes to "done()" (as all is 200 OK), but I check response content in there, like in the old days... This way if server is online, it resolves a real 200 OK with the correct expected response. But if it is offline, as I use the "cache: false" parametter, even with the SW OK 200, the response doesn't comes with the real expectes response text. So conditional fails and I can consider it as a real 404.

Simple, but that's it.

I've read your code from PC and figured what's up: your root certificate is not trusted on your system. Windows CryptoAPI throws CERT_E_UNTRUSTEDROOT when root certificate is not trusted. Along with this, CryptoAPI terminates revocation checking and throw two addition errors: CRYPT_E_NO_REVOCATION_CHECK and CERT_E_UNTRUSTEDROOT, because revocation checking was skipped. In addition with untrusted root, CryptoAPI skips other checks (such as constraints, for example), but do not report them. Everything is correct and as expected.

You are trying to allow untrusted root, but do it incorrectly, because this way you skip other checks (as mentioned in previous paragraph) and your logic is vulnerable.

You can exclude untrusted root exception in chain settings and force CryptoAPI to continue validation and return success if no other errors found, but I strongly recommend to not do that, because then you are open to any kind of MITM.

You have two options:

1. make root certificate trusted by a machine (local system). This may not be possible.
2. call CertCreateCertificateChainEngine function directly and put your root certificate in hRestrictedTrust member of CERT_CHAIN_ENGINE_CONFIG structure.

If you are on Windows, 2nd approach is the most secure and reliable. As of now, .NET's X509Chain doesn't implement this functionality. It requires extra coding, but there are no much alternatives.

You are saving the user selected pages’ list at server side in offline.json and you are caching that file too. As per working of PWA cached resources are served from cache and not from server until cache is removed/cleared.

You can take 2 approach.

1. Whenever user adds to the offline.json you need enforce service worker to update the offline file.

2. You can simply store the user selecting in local storage and from there you add pages to cache list.

In windows 10 I believe there is app settings that dictate whether or not you can install apps that are signed by an unknown signature, etc. Have you checked to make sure that these aren't locked down to only allow installs from the Microsoft App Store?

I think this applies:

https://technet.microsoft.com/en-us/library/ee619754%28v=ws.10%29.aspx

I have also seen issues where I have old certificate chains stuck on a specific AD user and was able to resolve them by clearing some of the certs and trying again.

I would also try installing it with any antivirus disabled etc.

This thread seems relevant, I would not use the first suggestion of disabling CRLF revcheck without trying some of the later comments first.

https://social.technet.microsoft.com/Forums/windowsserver/en-US/348a9b8d-8583-488c-9a96-42b892c4ae77/revocation-server-offline?forum=winserversecurity

You are getting error because of [String:Any] I suggest you to convert [String:Any] to Data Using JSONSerialization.data

And Then you can use like this

As I noted in my edit, I wasn't able to catch the ConcurrentModificationException, thus the entire stream was interrupted. I was in fact, modifying the List that is being emitted into individual Observable, since requestList is only a shallow copy of the List emitted by getSavedOfflineRequest.

One solution I tried was to first serialize the list via Moshi, so that the unserialzied list will not hold any reference to the original list. I found out soon enough that requestList.remove(request) will return false, since I had yet to properly override the equals() and hashCode() method for the Request class. In the end, I just settled to create a "failed requests" list, adding Requests to this list whenever an error is encountered.

Log is defined by construct_runtime macro. Here are some relevant code:

construct_runtime macro:

https://github.com/paritytech/substrate/blob/950e90e75dc7d16dcf99972fcc733945a832dc3e/srml/support/src/runtime.rs#L79