Setting up a socket policy file server

最新推荐文章于 2020-05-27 00:23:01 发布
转载 最新推荐文章于 2020-05-27 00:23:01 发布 · 117 阅读 · 0 ·
CC 4.0 BY-SA版权
原文链接：https://yq.aliyun.com/articles/565384

Adobe Flash Player 升级至9.0.124版本后，改变了安全策略，不再支持通过HTTP方式加载安全策略文件。开发者需要采用xmlsocket://方式提供安全策略，确保应用程序能够正常运行。

摘要生成于 C知道 ，由 DeepSeek-R1 满血版支持， 前往体验 >

在Adobe Flash Player升级到9.0.124后，由于安全策略的更改，使得在socket或xmlsocket的应用里，原先如用http方式加载安全策略的手段不能继续使用了，类似此类应用必须使用xmlsocket://方式来提供安全策略。flashplayer的安全策略检测过程如下：

1,首先检测目标服务器的843端口是否提供安全策略
2,如果1没有检测到策略，则检测actionscript是否使用了 Security.loadPolicyFile(xmlsocket://)  手段提供安全策略，如果还没检测到，则使用第3步检测
3,检测目标服务器目标端口是否提供安全策略

如果上述检测都不成功，则socket或xmlsocket则拒绝连接目标服务器。

这就是说，现在我们还必须为应用提供一个提供安全策略的socket服务，正好，adobe开发人员提供了这样一个小工具，本人测试过，能使用。

具体内容请看： http://www.adobe.com/devnet/flashplayer/articles/socket_policy_files.html

请使用了socket 或xmlsocket的开发者尽早更换安全策略提供方式吧，否则新版flashplay用户就该不能正常使用你的应用了。





    本文转自 OldHawk  博客园博客，原文链接：http://www.cnblogs.com/taobataoma/archive/2008/04/18/1159709.html，如需转载请自行联系原作者


【QNX+Android虚拟化方案】82 - QNX Camera 之 ais_server 服务 Camera总结
|~~~热爱生活、努力学习的小伙汁~~~|
08-03 1271
【QNX+Android虚拟化方案】82 - QNX Camera 之 ais_server 服务 Camera总结
【mongo8社区办】mongosh MongoServerSelectionError 超时
突围
11-19 266
root@k8s-master-pfsrv:~# sudo rm -f /tmp/mongodb-27017.sock root@k8s-master-pfsrv:~# ls -ld /tmp drwxrwxrwt 87 root root 36864 11月 19 19:40 /tmp root@k8s-master-pfsrv:~# ps aux | grep mongod root 3563032 0.0 0.0 9304 2112 pts/0 S+ 19:40 0:
建立Socket Policy服务器
luliangok
01-19 200
建立Socket Policy服务器（金庆的专栏）Flash和Unity3D游戏服务器需要开启一个Socket Policy服务器。详细说明见：Setting up a socket policy file serverhttp://www.adobe.com/devnet/flashplayer/articles/socket_policy_files.html协议如下：Flash或U3D播放器...
flash socket policy问题
weixin_34417200的博客
04-11 235
2019独角兽企业重金招聘Python工程师标准>>> ...
java与FlashSocket通信安全(转载)
whlxjq520的地盘
01-17 1354
  在Adobe Flash Player升级到9.0.124后，由于安全策略的更改，使得在socket或xmlsocket的应用里，原先如用http方式加载安全策略的手段不能继续使用了，类似此类应用必须使用xmlsocket://方式来提供安全策略。flashplayer的安全策略检测过程如下：1,首先检测目标服务器的843端口是否提供安全策略2,如果1没有检测到策略，则检测actionscri
Flash实现Websocket的跨域问题-安全沙箱问题解决办法
白袍小将的博客
08-25 4484
笔者在开发一款大型的直播交互平台时采用了Websocket技术来实现文字、弹幕与语音的交互，当前主流的浏览器都内建了Websocket的支持，因此直播平台在大多数浏览器上运行良好。但由于平台需要支持IE8（或以下版本）浏览器，由于IE没有内置的Websocket支持，因此考虑采用Flash实现一个代理层来支持Websocket，当Flash代码实现好后在IE中一运行，发现总是提示安全沙箱冲突，如下...
[mysqld] # # * Basic Settings # user = mysql pid-file = /var/run/mysqld/mysqld.pid socket = /var/run/mysqld/mysqld.sock port = 3306 datadir = /var/lib/mysql # If MySQL is running as a replication slave, this should be # changed. Ref https://dev.mysql.com/doc/refman/8.0/en/server-system-variables.html#sysvar_tmpdir # tmpdir = /tmp # # Instead of skip-networking the default is now to listen only on # localhost which is more compatible and is not less secure. bind-address = 127.0.0.1 mysqlx-bind-address = 127.0.0.1 # # * Fine Tuning # key_buffer_size = 16M #max_allowed_packet = 64M #thread_stack = 256K #thread_cache_size = -1 # This replaces the startup script and checks MyISAM tables if needed # the first time they are touched myisam-recover-options = BACKUP max_connections = 151 table_open_cache = 4000 # # * Logging and Replication # # Both location gets rotated by the cronjob. # # Log all queries # Be aware that this log type is a performance killer. general_log_file = /var/log/mysql/query.log general_log = 1 # # Error log - should be very few entries. # #log_error = /var/log/mysql/error.log # # Here you can see queries with especially long duration #slow_query_log = 1 #slow_query_log_file = /var/log/mysql/mysql-slow.log #long_query_time = 2 #log-queries-not-using-indexes # # The following can be used as easy to replay backup logs or for replication. # note: if you are setting up a replication slave, see README.Debian about # other settings you may need to change. #server-id = 1 #log_bin = /var/log/mysql/mysql-bin.log #binlog_expire_logs_seconds = 2592000 max_binlog_size = 100M #binlog_do_db = include_database_name #binlog_ignore_db = include_database_name以上是mysql.conf.d/mysqld.cnf文件的全部内容 哪里需要进行修改 请给出详细方案
05-29
validate_password.policy = MEDIUM ``` 3. **查询缓存优化**： ```ini query_cache_type = 0 # 8.0已弃用查询缓存[^3] ``` #### 五、配置验证公式 验证内存分配合理性： $$ \text{总内存消耗} = \text{innodb\_...
turnserver
突围
05-27 536
turnserver cortun turnserver wiki turnsever 是一个app，实现了TRUN 中继服务 turnserver application: a TURN relay server implementation Usage: $ turnserver [flags] [-n | -c <config-file>] [ --db=<sqlite-db-file> | --userdb=<sqlite-db-file>
huitian@k8s-control-1:~$ sudo kubeadm init --control-plane-endpoint "10.32.11.220:16443" --upload-certs --cri-socket=unix:///var/run/cri-dockerd.sock --pod-network-cidr=10.244.0.0/16 --apiserver-advertise-address=10.32.11.221 --v=5 I0814 13:49:46.690237 652314 kubelet.go:196] the value of KubeletConfiguration.cgroupDriver is empty; setting it to "systemd" I0814 13:49:46.698002 652314 version.go:187] fetching Kubernetes version from URL: https://dl.k8s.io/release/stable-1.txt I0814 13:49:47.707588 652314 version.go:256] remote version is much newer: v1.33.4; falling back to: stable-1.30 I0814 13:49:47.707663 652314 version.go:187] fetching Kubernetes version from URL: https://dl.k8s.io/release/stable-1.30.txt [init] Using Kubernetes version: v1.30.14 [preflight] Running pre-flight checks I0814 13:49:48.755580 652314 checks.go:561] validating Kubernetes and kubeadm version I0814 13:49:48.755646 652314 checks.go:166] validating if the firewall is enabled and active I0814 13:49:48.767478 652314 checks.go:201] validating availability of port 6443 I0814 13:49:48.767600 652314 checks.go:201] validating availability of port 10259 I0814 13:49:48.767619 652314 checks.go:201] validating availability of port 10257 I0814 13:49:48.767633 652314 checks.go:278] validating the existence of file /etc/kubernetes/manifests/kube-apiserver.yaml I0814 13:49:48.767646 652314 checks.go:278] validating the existence of file /etc/kubernetes/manifests/kube-controller-manager.yaml I0814 13:49:48.767657 652314 checks.go:278] validating the existence of file /etc/kubernetes/manifests/kube-scheduler.yaml I0814 13:49:48.767663 652314 checks.go:278] validating the existence of file /etc/kubernetes/manifests/etcd.yaml I0814 13:49:48.767674 652314 checks.go:428] validating if the connectivity type is via proxy or direct I0814 13:49:48.767692 652314 checks.go:467] validating http connectivity to first IP address in the CIDR I0814 13:49:48.767709 652314 checks.go:467] validating http connectivity to first IP address in the CIDR I0814 13:49:48.767720 652314 checks.go:102] validating the container runtime I0814 13:49:48.798500 652314 checks.go:637] validating whether swap is enabled or not I0814 13:49:48.798630 652314 checks.go:368] validating the presence of executable crictl I0814 13:49:48.798696 652314 checks.go:368] validating the presence of executable conntrack I0814 13:49:48.798741 652314 checks.go:368] validating the presence of executable ip I0814 13:49:48.798793 652314 checks.go:368] validating the presence of executable iptables I0814 13:49:48.798838 652314 checks.go:368] validating the presence of executable mount I0814 13:49:48.798883 652314 checks.go:368] validating the presence of executable nsenter I0814 13:49:48.798925 652314 checks.go:368] validating the presence of executable ethtool I0814 13:49:48.798963 652314 checks.go:368] validating the presence of executable tc I0814 13:49:48.799002 652314 checks.go:368] validating the presence of executable touch I0814 13:49:48.799089 652314 checks.go:514] running all checks I0814 13:49:48.815214 652314 checks.go:399] checking whether the given node name is valid and reachable using net.LookupHost I0814 13:49:48.815243 652314 checks.go:603] validating kubelet version I0814 13:49:48.864298 652314 checks.go:128] validating if the "kubelet" service is enabled and active I0814 13:49:48.892228 652314 checks.go:201] validating availability of port 10250 I0814 13:49:48.892345 652314 checks.go:327] validating the contents of file /proc/sys/net/ipv4/ip_forward I0814 13:49:48.892428 652314 checks.go:201] validating availability of port 2379 I0814 13:49:48.892477 652314 checks.go:201] validating availability of port 2380 I0814 13:49:48.892525 652314 checks.go:241] validating the existence and emptiness of directory /var/lib/etcd [preflight] Pulling images required for setting up a Kubernetes cluster [preflight] This might take a minute or two, depending on the speed of your internet connection [preflight] You can also perform this action in beforehand using 'kubeadm config images pull' I0814 13:49:48.892803 652314 checks.go:830] using image pull policy: IfNotPresent I0814 13:49:48.952669 652314 checks.go:862] image exists: registry.k8s.io/kube-apiserver:v1.30.14 I0814 13:49:48.983216 652314 checks.go:862] image exists: registry.k8s.io/kube-controller-manager:v1.30.14 I0814 13:49:49.008115 652314 checks.go:862] image exists: registry.k8s.io/kube-scheduler:v1.30.14 I0814 13:49:49.037284 652314 checks.go:862] image exists: registry.k8s.io/kube-proxy:v1.30.14 I0814 13:49:49.066411 652314 checks.go:862] image exists: registry.k8s.io/coredns/coredns:v1.11.3 I0814 13:49:49.092011 652314 checks.go:862] image exists: registry.k8s.io/pause:3.9 I0814 13:49:49.121953 652314 checks.go:862] image exists: registry.k8s.io/etcd:3.5.15-0 [certs] Using certificateDir folder "/etc/kubernetes/pki" I0814 13:49:49.122018 652314 certs.go:112] creating a new certificate authority for ca [certs] Generating "ca" certificate and key I0814 13:49:49.253708 652314 certs.go:483] validating certificate period for ca certificate [certs] Generating "apiserver" certificate and key [certs] apiserver serving cert is signed for DNS names [k8s-control-1 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 10.32.11.221 10.32.11.220] [certs] Generating "apiserver-kubelet-client" certificate and key I0814 13:49:49.585437 652314 certs.go:112] creating a new certificate authority for front-proxy-ca [certs] Generating "front-proxy-ca" certificate and key I0814 13:49:49.868021 652314 certs.go:483] validating certificate period for front-proxy-ca certificate [certs] Generating "front-proxy-client" certificate and key I0814 13:49:49.955381 652314 certs.go:112] creating a new certificate authority for etcd-ca [certs] Generating "etcd/ca" certificate and key I0814 13:49:50.090629 652314 certs.go:483] validating certificate period for etcd/ca certificate [certs] Generating "etcd/server" certificate and key [certs] etcd/server serving cert is signed for DNS names [k8s-control-1 localhost] and IPs [10.32.11.221 127.0.0.1 ::1] [certs] Generating "etcd/peer" certificate and key [certs] etcd/peer serving cert is signed for DNS names [k8s-control-1 localhost] and IPs [10.32.11.221 127.0.0.1 ::1] [certs] Generating "etcd/healthcheck-client" certificate and key [certs] Generating "apiserver-etcd-client" certificate and key I0814 13:49:50.787579 652314 certs.go:78] creating new public/private key files for signing service account users [certs] Generating "sa" key and public key [kubeconfig] Using kubeconfig folder "/etc/kubernetes" I0814 13:49:50.912204 652314 kubeconfig.go:112] creating kubeconfig file for admin.conf W0814 13:49:50.912354 652314 endpoint.go:57] [endpoint] WARNING: port specified in controlPlaneEndpoint overrides bindPort in the controlplane address [kubeconfig] Writing "admin.conf" kubeconfig file I0814 13:49:51.069239 652314 kubeconfig.go:112] creating kubeconfig file for super-admin.conf W0814 13:49:51.069386 652314 endpoint.go:57] [endpoint] WARNING: port specified in controlPlaneEndpoint overrides bindPort in the controlplane address [kubeconfig] Writing "super-admin.conf" kubeconfig file I0814 13:49:51.312214 652314 kubeconfig.go:112] creating kubeconfig file for kubelet.conf W0814 13:49:51.312361 652314 endpoint.go:57] [endpoint] WARNING: port specified in controlPlaneEndpoint overrides bindPort in the controlplane address [kubeconfig] Writing "kubelet.conf" kubeconfig file I0814 13:49:51.504372 652314 kubeconfig.go:112] creating kubeconfig file for controller-manager.conf W0814 13:49:51.504522 652314 endpoint.go:57] [endpoint] WARNING: port specified in controlPlaneEndpoint overrides bindPort in the controlplane address [kubeconfig] Writing "controller-manager.conf" kubeconfig file I0814 13:49:51.630717 652314 kubeconfig.go:112] creating kubeconfig file for scheduler.conf W0814 13:49:51.630861 652314 endpoint.go:57] [endpoint] WARNING: port specified in controlPlaneEndpoint overrides bindPort in the controlplane address [kubeconfig] Writing "scheduler.conf" kubeconfig file [etcd] Creating static Pod manifest for local etcd in "/etc/kubernetes/manifests" I0814 13:49:51.885607 652314 local.go:65] [etcd] wrote Static Pod manifest for a local etcd member to "/etc/kubernetes/manifests/etcd.yaml" [control-plane] Using manifest folder "/etc/kubernetes/manifests" [control-plane] Creating static Pod manifest for "kube-apiserver" I0814 13:49:51.885642 652314 manifests.go:103] [control-plane] getting StaticPodSpecs I0814 13:49:51.885763 652314 certs.go:483] validating certificate period for CA certificate I0814 13:49:51.885812 652314 manifests.go:129] [control-plane] adding volume "ca-certs" for component "kube-apiserver" I0814 13:49:51.885821 652314 manifests.go:129] [control-plane] adding volume "etc-ca-certificates" for component "kube-apiserver" I0814 13:49:51.885825 652314 manifests.go:129] [control-plane] adding volume "etc-pki" for component "kube-apiserver" I0814 13:49:51.885828 652314 manifests.go:129] [control-plane] adding volume "k8s-certs" for component "kube-apiserver" I0814 13:49:51.885833 652314 manifests.go:129] [control-plane] adding volume "usr-local-share-ca-certificates" for component "kube-apiserver" I0814 13:49:51.885839 652314 manifests.go:129] [control-plane] adding volume "usr-share-ca-certificates" for component "kube-apiserver" I0814 13:49:51.886435 652314 manifests.go:158] [control-plane] wrote static Pod manifest for component "kube-apiserver" to "/etc/kubernetes/manifests/kube-apiserver.yaml" [control-plane] Creating static Pod manifest for "kube-controller-manager" I0814 13:49:51.886453 652314 manifests.go:103] [control-plane] getting StaticPodSpecs I0814 13:49:51.886569 652314 manifests.go:129] [control-plane] adding volume "ca-certs" for component "kube-controller-manager" I0814 13:49:51.886579 652314 manifests.go:129] [control-plane] adding volume "etc-ca-certificates" for component "kube-controller-manager" I0814 13:49:51.886583 652314 manifests.go:129] [control-plane] adding volume "etc-pki" for component "kube-controller-manager" I0814 13:49:51.886589 652314 manifests.go:129] [control-plane] adding volume "flexvolume-dir" for component "kube-controller-manager" I0814 13:49:51.886593 652314 manifests.go:129] [control-plane] adding volume "k8s-certs" for component "kube-controller-manager" I0814 13:49:51.886596 652314 manifests.go:129] [control-plane] adding volume "kubeconfig" for component "kube-controller-manager" I0814 13:49:51.886602 652314 manifests.go:129] [control-plane] adding volume "usr-local-share-ca-certificates" for component "kube-controller-manager" I0814 13:49:51.886605 652314 manifests.go:129] [control-plane] adding volume "usr-share-ca-certificates" for component "kube-controller-manager" I0814 13:49:51.887135 652314 manifests.go:158] [control-plane] wrote static Pod manifest for component "kube-controller-manager" to "/etc/kubernetes/manifests/kube-controller-manager.yaml" [control-plane] Creating static Pod manifest for "kube-scheduler" I0814 13:49:51.887149 652314 manifests.go:103] [control-plane] getting StaticPodSpecs I0814 13:49:51.887264 652314 manifests.go:129] [control-plane] adding volume "kubeconfig" for component "kube-scheduler" I0814 13:49:51.887560 652314 manifests.go:158] [control-plane] wrote static Pod manifest for component "kube-scheduler" to "/etc/kubernetes/manifests/kube-scheduler.yaml" I0814 13:49:51.887574 652314 kubelet.go:68] Stopping the kubelet [kubelet-start] Writing kubelet environment file with flags to file "/var/lib/kubelet/kubeadm-flags.env" [kubelet-start] Writing kubelet configuration to file "/var/lib/kubelet/config.yaml" [kubelet-start] Starting the kubelet [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory "/etc/kubernetes/manifests" [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s [kubelet-check] The kubelet is healthy after 1.001514652s [api-check] Waiting for a healthy API server. This can take up to 4m0s 超时API
最新发布
08-15
我们正在解决 `kubeadm init` 超时问题，具体表现为 API server 的 healthz 端点不可达。根据引用内容，我们可以从以下几个方面排查： ### 1. **检查 API Server 服务状态** - 确保 `kube-apiserver` 服务正常运行...
使用Socket.io 在跨域时遇到的坑
freeman983
11-04 7802
以下这些问题仅在跨域时才遇到 使用flashsocket,报错： make sure the server is running and Flash socket policy file is correctly placed 解决方案，增加policyServer.js var net = require('net'); var fs = require('fs'); ...
flash as3 socket安全服务网关（socket policy file server）
weixin_30832983的博客
07-05 177
关键字： SecurityErrorEvent socket as3 flash有着自己的一套安全处理模式，在socket方面，我这样的菜鸟无法理解他的好处：一句话，不怀好意的人如果想用flash写一段带破坏意义的socket客户端（我这里只谈客户端，不谈as3 做 socketserver）程序，你给禁止了，他可以用其他的程序，实际上，这种人也不会用flash去写；你的这些安全...
flask 中使用 socket 遇到的坑
diandinai8712的博客
04-22 1375
很久没用博客园了，最近涉及到一个问题，需要向前端推送日志 考虑的方案两个，一个是定时ajax 但是这样效率太慢了，二是用socket 那看看有没有轮子咯，面向百度编程，有两个库可以使用 1.flask-sockets 2.flask-socketIO 具体的使用大家网上都能找的到，具体这里说一下遇到的坑， flask-socketIO app.run() 出现这样的...
解决flash发布为html格式后无法进行socket通信的问题
若水三千
08-23 6824
 1.问题描述：  将flash发布为html格式后，加载页面后，swf无法与服务器进行socket通信。Flash端显   示的错误为：securityErrorHandler信息: [SecurityErrorEvent type="securityError" bubbles=false cancelable=false eventPhase=2 te
proxyTable 解决跨域问题
weixin_34199405的博客
04-13 251
1.使用 proxyTable(地址映射表)解决跨域问题（即通过设置代理解决跨域问题）： 可以通过设置将复杂的url简化，例如我们要请求的地址是api.xxxxxxxx.com/list/1，可以按照如下设置： proxyTable: { '/list': { target: 'http://api.xxxxxxxx.com', pathRewrite: { '^...
socketio 服务器推送
iechenyb专栏
06-25 1620
如果面试官问你：要把服务器端的数据时时显示在浏览器上怎么实现？我想有很多人会回答使用Ajax技术定时去访问一个资源，没错，使用Ajax的确能实现，但面试官要的绝对不是这个答案。因为使用Ajax频繁访问给服务端造成太大的压力，所以在大部分情况下都是不取的。面试官想要的答案应该是将服务器端的数据推送至浏览器，这样只需要保持一个长链接就可以了。 socket.io就能实现数据的时时推送，soc
setting up a menu NAV tag is a problem. please correct it in my current file
11-29
<li><a href="#home">首页</a> <li><a href="#about">关于</a> <li><a href="#services">服务</a> <!-- 更多链接 --> <li><a href="#contact">联系我们</a> ``` 确保每个链接（`<a>`）都有明确的目的地，...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值