Question

I have an application running on flex and php, connected using amfphp, i added a secure channel to services.conf of amfphp

<channel-definition class="mx.messaging.channels.SecureAMFChannel" id="my-amfphpSec">
    <endpoint class="flex.messaging.endpoints.SecureAMFEndpoint" uri="https://flashservices/gateway.php"/>
</channel-definition>

how do i know if flex is actually using this secure channel? i tried

isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off'

and

$_SERVER['SERVER_PORT'] == 443

from the php side and they are both false … but if i remove these checks it works fine, what am i doing wrong here?

Thanks.

note: I’m using wamp, with mod_ssl, and working from localhost

Answer 1

I used Fiddler, when the information is encrypted, it shows a padlock icon next to the packet, and if you open the information of the packet you can see its encrypted.

Fiddler can be downloaded from here

Firebug doesn’t show that information.