Incomplete encrypted downloads

[pBarrelas]

Thanks for that link. It’s really helpful!

Could an SSL solve my problems? I’m asking this because SSLs encrypts all the files in my server and eStore wouldn’t need to encrypt the download links anymore? Or the eStore feature of limiting the number of downloads and life span wouldn’t work anymore?

[wzp]

SSL only encrypts the traffic between the server and the user. It does not guarantee that the user on the other end is the one you want downloading stuff. SSL is used to prevent other people from “eavesdropping” on the communications between the server and user.

[pBarrelas]

Ok, thanks for the explanation!

[pBarrelas]

So, just to finish this subject.

In order to use eStore properly with the type of digital items I’m distributing, I have to use Amazon S3?

To be honest I can’t accept this as the solution because a client of mine was able to download a file directly from my server that was impossible to finish with eStore in the middle of the equation encrypting the link.

When I purchase eStore there wasn’t an ad explaining that eStore might get some issues regarding large file transfers and that it might require amazon S3 to work properly.

[wzp]

To summarize… the technical reason for the incomplete downloads is that GoDaddy is terminating the download script before it has time to complete. This issue has been discussed many times over the years, in these forums. Even GoDaddy’s own technical forums contain threads by customer complaining about shared and grid server performance issues.

The issue is not because of any defect in eStore. If it was due to a defect, the problem would not just affect “some” of your customers and not others. It is due to the limitations imposed by (in this case) GoDaddy. The Amazon S3 solution was developed because there was a real need to overcome technical issues that are out of the product’s control.

Using Amazon S3 integration completely removes server issues from the equation, and is several magnitudes less expensive than the monthly cost of using a dedicated server.

You can also try and convince GoDaddy to extend your server timeouts.

[pBarrelas]

OK thanks again for your help. I’m new on this ecommerce stuff and wasn’t aware of these limitations.

I guess I have to try to ask GoDaddy to extend my server timeouts.

Thanks for your support!

[wzp]

If you’re successful, getting them to do it, please let us know.

[pBarrelas]

Unfortunately they won’t change that as they said:

“We do not regulate a timeout option on your hosting server. If there is a timeout while downloading a file from your website, the issue will be with the local system used to download. Each computer and internet connection will be different.”

What do you think?

[wzp]

Sounds like they are saying the timeout occurs because either the buyer’s system or Internet connection is below par.

Technically, they are correct. The timeout we are specifically talking about is the HTTP request timeout. If the entire download doesn’t complete in a certain amount of time, the server kills the script. Because every buyer has a different system/connection situation, there is no way (from GoDaddy’s standpoint) that they can ensure a timeout value that will meet every situation, without defeating the purpose of having the HTTP request timeout value. It’s a (GoDaddy server) business decision; because when you use virtual, shared or grid hosting, you can’t change this timeout value without affecting all sites that use the same physical boxes. With dedicated servers, you don’t have this issue.

[pBarrelas]

OK, I’ve setup a Amazon S3 account and will start to make some tests with the free training I’m offering on my website before use it with the commercial training.

One things that the documentation, regarding setting up the URLs, is that it states that the URLs should be of this type:

as3tp://bucket.s3.amazonaws.com/object

as3tp://bucket.s3.amazonaws.com/folder/object

as3tps://bucket.s3.amazonaws.com/folder/folder/object

as3tps://public@bucket.s3.amazonaws.com/object

but mine only works with a URL like this: https://bucket.s3.amazonaws.com/folder/object

[pBarrelas]

Ok after all it isn’t working the way I have it setup. It looked like it works but the download hangs for a few seconds and terminates.

So I’ve changed my URL to as3tps://bucket.s3.amazonaws.com/folder/folder/object

and in the debug log “…AS3TP URI request = …” and “…Dispatching AS3TP URL = …” appears.

The problem is that I can’t make the download to work.

<Error>

SignatureDoesNotMatch

<Message>

The request signature we calculated does not match the signature you provided. Check your key and signing method.

</Message>

…

I don’t know what is happening because I’ve rechecked the AWS Access Key ID and AWS Secret Access Key and they are fine!

[wzp]

Do you have any illegal characters in your bucket name?

http://docs.amazonwebservices.com/AmazonS3/latest/dev/index.html?BucketRestrictions.html

BTW, it’s okay to post the complete actual path you are using, since your keys are still a secret

Specifically, what is the URL that it’s trying to dispatch to?

Ah, and you did replace “bucket” with a real bucket name… ditto with “folder” and “object”

[pBarrelas]

My file has this path:

https://s3.amazonaws.com/vertextutor/free-training/test-file.rar

I don’t think it has any illegal characters, but now I can’t even directly download it myself as a few hours ago.

<Error>

AccessDenied

<Message>Access Denied</Message>

<RequestId>B44F65FF739959F6</RequestId>

<HostId>

m5uniNw27K/9bhLNgs7cZmUJRDECwoY1qKEI+TDPS1BqPc1zD0cMojiI3a4X3sEq

</HostId>

</Error>

[pBarrelas]

OK now I can download it because I added some extra permissions in order to allow everyone to open/download. Is this fine?

[pBarrelas]

After setting a Test Training product on my eStore with the URL as3tps://s3.amazonaws.com/vertextutor/free-training/test-file.rar, I generated this encrypted download link: Test Training – http://www.vertextutor.com/wp-content/plugins/wp-cart-for-digital-products/download.php?file=0xOa%2FCsBVvGZgari

By clicking in it, it will give this error:

<Error>

<code>SignatureDoesNotMatch</code>

<Message>

The request signature we calculated does not match the signature you provided. Check your key and signing method.

</Message>

<StringToSignBytes>

47 45 54 0a 0a 0a 31 33 31 32 34 36 30 30 37 38 0a 2f 76 65 72 74 65 78 74 75 74 6f 72 2f 66 72 65 65 2d 74 72 61 69 6e 69 6e 67 2f 74 65 73 74 2d 66 69 6c 65 2e 72 61 72

</StringToSignBytes>

<RequestId>9CFA39E76F6A5762</RequestId>

<HostId>

2lK96mAx6LI++zhqsCon64XFDe82hzAX96iX6LuYMI6Ufdtc/Cla3qePyj9bCmKa

</HostId>

<SignatureProvided>TgLqqs+xVPfsE3ImbT7SBlEinKE=</SignatureProvided>

<StringToSign>

GET 1312460078 /vertextutor/free-training/test-file.rar

</StringToSign>

<AWSAccessKeyId>AKIAJKE2AB5ESN4NEGAQ</AWSAccessKeyId>

</Error>

[Author]

Posts