×

Discussion Board

Results 1 to 8 of 8
  1. #1
    Registered User
    Join Date
    Feb 2012
    Posts
    1

    Does the API work with SSL or HTTPS?

    Hi,

    Can you tell me if the api works with SSL or HTTPS?

    Thanks,

    Dave

  2. #2
    Regular Contributor
    Join Date
    Aug 2011
    Location
    Berlin
    Posts
    289

    Re: Does the API work with SSL or HTTPS?

    The API does not currently work with https, this is because all the map tiles are being sent via http. Adding https support is not currently under consideration, but if it were, it would be a premium business feature.

  3. #3
    Registered User
    Join Date
    Mar 2012
    Posts
    9

    Re: Does the API work with SSL or HTTPS?

    Business feature? It's only a certificate instalation on your web server.

  4. #4
    Regular Contributor
    Join Date
    Aug 2011
    Location
    Berlin
    Posts
    289

    Re: Does the API work with SSL or HTTPS?

    Quote Originally Posted by adiazcan View Post
    Business feature? It's only a certificate installation on your web server.
    Business Feature because it is something that Nokia may be able to derive revenue from. Yes I agree it is not technically difficult, however there is no business benefit to offering all features of all services to all developers for free.

  5. #5
    Registered User
    Join Date
    Sep 2013
    Posts
    4

    Re: Does the API work with SSL or HTTPS?

    Sorry to return to this very old thread.

    I did read the previous post/comments about HTTPS not being supported on nokia maps and that map tiles are being delivered only via HTTP.

    However i did noticed something strange, it is possible to request a map tile via HTTPS. Example: https://3.maptile.lbs.ovi.com/maptil...56/png8?lg=GER (you will have to provide app_id and token parameters additionally before lg parameter)

    When i try this in my browser i will just get a warning to accept third-party certificate (for Akamai if i remember correctly).

    I also noticed it is possible to include javascript API into your page like this:
    HTML Code:
    <script src="https://api.maps.nokia.com/2.2.3/jsl.js" type="text/javascript" charset="utf-8"></script>
    In turn, Nokia will include it's additional modules javascript files also via HTTPS.
    HTML Code:
    <script charset="utf-8" type="text/javascript" src="https://api.maps.nokia.com/2.2.3/jsl.js">
    <script src="https://api.maps.nokia.com/2.2.3/jsPlacesDataAPI.js" charset="UTF-8" type="text/javascript">
    <script src="https://api.maps.nokia.com/2.2.3/base.js" charset="UTF-8" type="text/javascript">
    <script src="https://api.maps.nokia.com/2.2.3/language-en-US.js" charset="UTF-8" type="text/javascript">
    <script src="https://api.maps.nokia.com/2.2.3/gfx-canvas.js" charset="UTF-8" type="text/javascript">
    <script src="https://api.maps.nokia.com/2.2.3/map-js-p2d-canvas.js" charset="UTF-8" type="text/javascript">
    <script src="https://api.maps.nokia.com/2.2.3/ui-nokia_generic.js" charset="UTF-8" type="text/javascript">
    <script src="https://api.maps.nokia.com/2.2.3/positioning-w3c.js" charset="UTF-8" type="text/javascript">
    <script src="https://api.maps.nokia.com/2.2.3/behavior-all.js" charset="UTF-8" type="text/javascript">
    <script src="https://api.maps.nokia.com/2.2.3/language-de-DE.js" charset="UTF-8" type="text/javascript">
    Al though the images (tiles) will still be loaded via plain HTTP. This solution works perfectly for me.

    The only trouble i had on HTTPS is this
    HTML Code:
    <script src="https://api.maps.nokia.com/2.2.3/jsl.js?with=all" type="text/javascript" charset="utf-8"></script>
    When i try to include all nokia maps modules it seems that later on when executing my js code one resource is loaded via HTTP. And this is in browsers a security issue. You can not use HTTP resource in a HTTPS connection. That said, the browsers still allow the tiles to be loaded via plain HTTP.

    This is the resource which causes the problems to me:
    Blocked loading mixed active content: http://geo.nlp.nokia.com/search/6.2/geocode.json
    Even more strange is that this resource is accessible normally via HTTPS.

    So finally, what is currently the status of HTTPS support? And is it possible to load javscripts API via HTTPS?
    Currently i am loading the API and using it via HTTPS (but only the standard packages - without paramater ....?with=all). The problem only comes if i try to use package for directions i think. Then it will try to use the resource i mentioned above. And it will not work because it is a security issue (it was loaded via HTTP).

    Cheers,
    Brane.

  6. #6
    Regular Contributor
    Join Date
    Aug 2011
    Location
    Berlin
    Posts
    289

    Re: Does the API work with SSL or HTTPS?

    Using the API with HTTPS remains an enterprise feature - in other words something you need to pay for. HTTPS is not openly available to the free public API. Attempting to circumvent this restriction through figuring out the URLs to request map tiles directly is not recommended (for example supported the URLs could be altered at any time) and besides reverse engineering is prohibited under the terms and conditions

    You may not (a) reverse engineer, decompile, disassemble or otherwise attempt to discover the source code of the Location Platform Services, except and only to the extent permitted by applicable mandatory law;
    As you have noticed, some services such as geocoding have already closed this loophole. I guess the other services will do so too if considered necessary.


    You can request the enterprise package by clicking the contact us button at the bottom of the plans page.

    BTW you are using an outdated version of the API - 2.2.4 is the current free public API version, at least for now.

  7. #7
    Registered User
    Join Date
    Sep 2013
    Posts
    4

    Re: Does the API work with SSL or HTTPS?

    Thanks for a quick reply. My client is using the enterprise version of Nokia maps (payed service). So that was the reason i was asking for correct implementation details. Because we have some sites which are in HTTPS and browsers complains when you mix non HTTPS resources on HTTPS page. I did not find a documentation which explains how to use maps with HTTPS (or maybe i was not looking in the right places).

  8. #8
    Regular Contributor
    Join Date
    Aug 2011
    Location
    Berlin
    Posts
    289

    Re: Does the API work with SSL or HTTPS?

    With the latest website refresh, access to the Enterprise APIs has been simplified. You will find the Enterprise JavaScript API documentation here. The necessary code for setting up HTTPS can be found in the user guide. The Enterprise JavaScript API explorer also shows examples on how to do this. You'll need to log in to access these.

Similar Threads

  1. Https request problem whith PAMP. Is https/SSL supported?
    By yakimov in forum Mobile Web Server
    Replies: 0
    Last Post: 2010-01-24, 11:31
  2. file browser.sis work mine doesnot work???!!
    By programer_asal in forum Symbian
    Replies: 6
    Last Post: 2009-07-13, 14:42
  3. J2ME Security : MIDP HTTPS vs Browser HTTPS
    By dhamodharan in forum Mobile Java Networking & Messaging & Security
    Replies: 1
    Last Post: 2005-09-11, 14:19

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
×