-
Bug
-
Resolution: Fixed
-
Low
-
9.2.1
-
1
-
Severity 3 - Minor
-
Issue Summary
For a confluence instance where SSL is not configured and application is accessed using http and not https, we can not add roadmap planner macro. When we click the Insert button, there is no response and nothing happens.
On checking the logs no significant errors are observed.
However, on checking the console logs from the browser dev tools, below error is seen :
On checking for this error, found the below discussion regarding the same error message :
The first response to this question in the above link tells us that the digest likely refers to window.crypto.subtle.digest of the Web Crypto API. if using a Chromium-based browser, according to the the Chromium Projects page here, the subtle property can only be used in a secure origin:
Access to the WebCrypto API is restricted to secure origins (which is to say https:// pages).
Note: In the spec, crypto.subtle is supposed to be undefined in insecure contexts
Because digest is a method of subtle, and subtle is undefined, it can be getting this error.
It seems that the front-end libraries try to reach out to the Web Crypto API and the browser is only allowing the users while using an HTTPS connection.
Steps to Reproduce
Pre-condition : In order to reproduce this issue, Confluence should be accessed over http and not https.
- Install Confluence 9.2.1 on Linux OS.
- Create a page.
- Try to insert 'Roadmap Planner' macro.
Expected Results
Roadmap Planner should be added to the page.
Actual Results
Nothing happens on clicking 'Insert' button and unable to add macro to the page.
Workaround
Based on above analysis, on using a secure connection (HTTPS/SSL) to access confluence, issue is not faced anymore and it allows user to add the roadmap planner successfully on the same instance as shown below :
[CONFSERVER-99416] Unable to add Roadmap Planner macro in confluence 9.2.1 without HTTPS
| Fix Version/s | Original: 10.0.0 [ 111391 ] | |
| Fix Version/s | New: 10.0.1 [ 113254 ] |
| Resolution | New: Fixed [ 1 ] | |
| Status | Original: Waiting for Release [ 12075 ] | New: Closed [ 6 ] |
| Remote Link | New: This issue links to "Page (Confluence)" [ 1025003 ] |
| Remote Link |
New:
This issue links to "Confluence Bundled Plugins 95 › Confluence Public Plugins › issue-95- |
| QA Demo Status | Original: Not Done [ 14330 ] | New: Done [ 14331 ] |
| QA Kickoff Status | Original: Not Done [ 14234 ] | New: Not Needed [ 14236 ] |
| Status | Original: In Progress [ 3 ] | New: Waiting for Release [ 12075 ] |
| Fix Version/s | New: 9.2.5 [ 113093 ] | |
| Fix Version/s | New: 10.0.0 [ 111391 ] |
| Remote Link |
New:
This issue links to "Confluence Bundled Plugins 94 › Confluence Public Plugins › issue-94- |
| Labels | Original: ewt-rtb-service-operations-and-tech-entropy knights-watch sec-escape warranty | New: ewt-rtb-service-operations-and-tech-entropy internal-kickoff knights-watch sec-escape warranty |
| Link | New: This issue depends on CONFSRVDEV-41783 [ CONFSRVDEV-41783 ] |
Engineering Taxonomy Bot
made changes -
| Labels | Original: knights-watch sec-escape warranty | New: ewt-rtb-service-operations-and-tech-entropy knights-watch sec-escape warranty |