[hunchentoot-devel] IE https problem

[Robert Synnott]

Just on this, even the favicon being HTTP and the document being HTTPS
is sometimes enough to trigger this behaviour, and if IE is set to
'High' security I don't think it'll even ask; it just won't load
things.
Rob

2009/6/15 Robert Synnott <rsynnott at gmail.com>:
> Is it possibly an issue with the client security settings? IE is very
> fussy about websites (and potentially other entities) which have HTTPS
> and HTTP components. This seems less likely to be a problem with PDFs,
> but it may be possible, especially if it's HTTPS PDF embedded in
> HTTP-served pages or vice versa. Alternatively, is there anything
> wrong with your certificate? It's possible the IE is rejecting it out
> of hand, though it generally at least asks.
>
> This issue has become worse in IE8. Previously, default behaviour on
> the mixed content thing was to pop up a box asking if the user wanted
> to load everything; the default was 'Yes', causing everything to be
> loaded. In IE8, it's the other way round; 'Yes' will cause it NOT to
> load non-secure objects. This is going to break all sorts of things,
> of course :)
>
> If you view the page in Firefox or Safari do you get a warning image
> in the status bar?
> Rob
>
> 2009/6/15 Edi Weitz <edi at agharta.de>:
>> Sorry if this is a bit off-topic, but I tried to debug this on my own
>> and I also searched Google for quite some time but couldn't find
>> anything yet.  I'm now hoping that someone on the list can maybe help
>> with this.
>>
>> I have a Hunchentoot (pre-1.0.0) application running on a customer's
>> server which has been online and running fine for a couple of years
>> now.  (It has seen a few updates, but none in the recent months.)  The
>> application sits behind an Apache which acts as a proxy in the usual
>> way.  Content is served to the client through https which is done by
>> Apache, i.e. Apache talks plain http to Hunchentoot.
>>
>> The application serves, amongst other things, RTF and PDF documents to
>> the clients which are dynamically generated.  Some time ago, in the
>> first half of this year, this ceased to work for RTF documents when
>> the client was MSIE 7.  This happened after my customer's MSIE 7
>> browsers received an automatic software update from Microsoft.  A bit
>> later the browsers were updated again (to MSIE 8) and now PDF download
>> is also broken.  With Firefox, all is still fine.  Also, if I access
>> the website through http instead of https, downloads (RTF and PDF)
>> still work fine.
>>
>> Judging from the timing, this is pretty obviously an incompatibility
>> between my app (and/or Hunchentoot) which was introduced due to the
>> MSIE upgrade, but after fighting with this for quite some time I still
>> don't have a clue what the reason is and how I could fix it.  The log
>> files don't reveal anything, they just show a normal download of the
>> RTF/PDF document - while MSIE claims that it didn't receive anything.
>>
>> Any ideas/hints?
>>
>> Thanks,
>> Edi.
>>
>> _______________________________________________
>> tbnl-devel site list
>> tbnl-devel at common-lisp.net
>> http://common-lisp.net/mailman/listinfo/tbnl-devel
>>
>
>
>
> --
> Robert Synnott
> http://myblog.rsynnott.com
> MSN: rsynnott at gmail.com
> Jabber: rsynnott at gmail.com
>



-- 
Robert Synnott
http://myblog.rsynnott.com
MSN: rsynnott at gmail.com
Jabber: rsynnott at gmail.com