pmichael
Posts:21
| | 09/02/2007 11:29 AM |
| Is no one else experiencing this:
I enabled SSL in the stock DNN way - easy enough - and also checked "Security Enforced" to ensure that pages not set as secure would not be delivered via SSL.
Here's what happened: The URL stayed like this: https
for pages that were not marked secure, and I got an error saying the page could not be displayed. When I altered the URL in the address bar to remove the s and reloaded, then the page loads fine.
This is DNN 4.5.5
It's working right, sort of ... except it should direct back to http for pages not marked as secure, not leave it as https and throw an error!
| | | |
|
asifshiraz
Posts:1
| | 09/09/2007 2:12 AM |
| | I've been having difficulty getting SSL setup and saw this thread so I thought I'd post here. I've finally been able to get SSL working properly using DNN 4.5.5, but I've noticed it doesn't work at all when I also use a friendly URL rewriter. Has anyone also seen this problem? Does PageBlaster help overcome this? Thanks in advance. | | | |
|
John Mitchell
Posts:3084
| | 09/15/2007 8:25 AM |
| | I don't know exactly why SSL would not work wih your Friendly Urls, but PageBlaster may be able to help. | | | |
|
pmichael
Posts:21
| | 09/15/2007 4:24 PM |
| But what about my problem?? Posted By pmichael on 09/02/2007 11:29 AM
Is no one else experiencing this:
I enabled SSL in the stock DNN way - easy enough - and also checked "Security Enforced" to ensure that pages not set as secure would not be delivered via SSL.
Here's what happened: The URL stayed like this: https
for pages that were not marked secure, and I got an error saying the page could not be displayed. When I altered the URL in the address bar to remove the s and reloaded, then the page loads fine.
This is DNN 4.5.5
It's working right, sort of ... except it should direct back to http for pages not marked as secure, not leave it as https and throw an error! | | | |
|
John Mitchell
Posts:3084
| | 09/15/2007 10:00 PM |
| I haven't had a chance to try out the error you are getting with SSL not switching off since I use the Javascript method.
I haven't heard any other complaints about it though. I'll try it when I get some free time. | | | |
|
YodaRocks
Posts:11
| | 01/26/2008 12:00 PM |
| I'm experiencing exactly the same issue with DNN 4.8. Has there been any more discussion on this? Thanks, Steve | | | |
|
YodaRocks
Posts:11
| | 01/26/2008 12:05 PM |
| I should mention that I also am running DNNMasters SEO pack, but this occurs when it's turned off on the portal I'm testing. Steve | | | |
|
YodaRocks
Posts:11
| | 01/26/2008 2:20 PM |
| I've done some further testing. I tried running without URL rewriting (DNNMasters SEO pack), and with friendly URLs off, and the problem persists. There's a possibility that this is a DNN problem (I'm running DNN 4.8). Before I report this as a possible bug, two questions: 1. Is anyone able to duplicate this (DNN 4.8, friendly URLs off)? 2. I don't understand PB very well, since I'm new to it. Is there any possibility that page caching via PB could have anything to do with this issue? Steve | | | |
|
John Mitchell
Posts:3084
| | 01/26/2008 3:45 PM |
| I have found a problem in the latest versions of DNN with SSL. If you set the page as secure, there is an assumption in the Url Rewriter that you will not be going directly to the page using SSL and it causes the page to get caught in an endless loop if you do. It doesn't matter if you have Friendly Urls on or not. I don't know if that is what you are experiencing though. | | | |
|
YodaRocks
Posts:11
| | 01/26/2008 9:04 PM |
| John, what I'm experiencing is that when you are on an SSL page and click to a non-SSL page, the URL for the non-SSL page uses the encrypted protocol, https rather than http.
I did try your javascript idea (thanks for providing the code on another thread) and that created an endless loop. Are you trying DNN SSL without your Javascript? I'm interested to know if you are able to duplicate my problem.
Thanks,
Steve | | | |
|
John Mitchell
Posts:3084
| | 01/26/2008 10:11 PM |
| I just installed a clean version of DNN 4.8 and tested this and everything worked as expected using both formats for Friendly Urls.
I was able to set a page as secure and navigate between secure and non-secure pages and it would do a 302 redirect to switch it on and off. | | | |
|
YodaRocks
Posts:11
| | 01/27/2008 8:20 AM |
| I really appreciate your going through this kind of effort, John. I assume you also had PageBlaster installed for the test, right? Knowing that you were unable to duplicate the problem with a clean install of DNN 4.8 suggests that I have something else going on other than an issue with PageBlaster. But what? Steve | | | |
|
John Mitchell
Posts:3084
| | 01/27/2008 8:32 AM |
| Yes, I did have PageBlaster installed. Do you have "Enforce" checked on the Admin > Site Settings page?
When you click to a non-ssl page, is it going there with with http:// and then switching to https://?
Maybe the javascript is still lingering in cache or something?
If you have it online I'll take a look and see if I can spot what is happening.
I had noticed an issue when I first upgraded Snapsis to 4.8 and I even changed the source to fix that problem I described earlier (because it was interferring with my javascript and direct links), so there may be some setup that causes problems, but I couldn't re-create it just using DNN 4.8. | | | |
|
YodaRocks
Posts:11
| | 01/27/2008 9:22 AM |
| John, I've continued to test to narrow this down. After removing both PageBlaster and the DNNMasters SEO module, the problem was resolved. When adding PageBlaster, there was no problem at all -- I could move back and forth between http and https pages without the problem I reported. Removing PageBlaster once again and adding DNNMasters SEO module, the problem re-surfaced. I can now say with high confidence that PageBlaster has nothing to do with the problem I'm experiencing.
Chris at DNNMasters is very responsive and I'm sure will work with me on this. By the way, he referred me to PageBlaster, which I very much appreciated.
Thanks again for taking your time on this.
Steve | | | |
|
YodaRocks
Posts:11
| | 01/27/2008 9:27 AM |
| Posted By John Mitchell on 01/27/2008 8:32 AM
Yes, I did have PageBlaster installed. Do you have "Enforce" checked on the Admin > Site Settings page?
When you click to a non-ssl page, is it going there with with http:// and then switching to https://?
Maybe the javascript is still lingering in cache or something?
If you have it online I'll take a look and see if I can spot what is happening.
I had noticed an issue when I first upgraded Snapsis to 4.8 and I even changed the source to fix that problem I described earlier (because it was interferring with my javascript and direct links), so there may be some setup that causes problems, but I couldn't re-create it just using DNN 4.8. Sorry, I didn't see your posting before my immediately-prior post. It doesn't appear to be going there as http:// and switching to https://. Instead, it seems to just be going there as https:// yet the URL is otherwise the right one for the page. I'm going to do a screen capture video for Chris, to show the problem. I'll share it with you in case you see something that I'm missing. Steve | | | |
|
YodaRocks
Posts:11
| | 01/27/2008 9:42 AM |
| John, at what email address may I contact you off-forum?
Steve | | | |
|
John Mitchell
Posts:3084
| | 01/27/2008 3:35 PM |
| Hi Steve. You can reply directly to the notification from this post. | | | |
|
mhile
Posts:1
| | 03/27/2008 10:22 AM |
| I have been reading this thread with great interest. We have been struggling with getting SSL to play nicely with DNN and you seem to be really well versed in this area. We can get SSL to work when we have seperate sites (site1.org, site2.org) running on a seperate DNN installation. However, we also have the need to secure project sites with a few users and do not what to purchase additional certs. So here is my set up - secure.mysite.org (this has the SSL cert installed)
- mysite.org (not secure)
- mysite.org/childPortal (not secure)
I would like to be able to secureparts of the two unsecure DNN sites using the secure.mysite.org cert. I have tried telling dnn that my secure pages are at secure.mysite.org but when I do I get a SSL secured page but a 404 error that default.asps is not found. Can this scenero be done in DNN? If so how do I configure ISS and DNN to do it? Much thanks, Matthew | | | |
|
wstrohl
Posts:86
| | 04/04/2008 2:24 PM |
| We are also having this problem of SSL lingering on pages since installing and using PageBlaser. We have SSL Enforce enabled. After installing PageBlaster, if a visitor visits an encrypted page, all subsequent pages after that are attempted to be served as an SSL page. Something within PageBlaster is not allowing the URL to be rewritten to non-SSL by DNN. What is the official fix to this? | | | |
|
OM
Posts:31
| | 04/27/2008 10:08 PM |
| I believe I have the same problem as pmichael, yodarocks and wstrohl...
Using PB, with Enable SSL and Enforce SSL checked, a request to https://mysite.com/home.aspx (which does not have Secure checked) results in:
HTTP/1.1 200 OK
Connection: close
The connection is just closed, and the expected redirection never occurs. Reading other forums and your post about Enable/Enfore SSL does suggest that it is meant to redirect from https -> http. (301 or 302 or 307 or something else, btw?)
Maybe its is because I dont have a SSL cert - and there will never be one either... I am about to launch a new DNN version of an old non DNN site (that always returns 200 OK for https OR http) . In my case google has indexed a page as both https://mysite.com/home.aspx and as http://mysite.com/home.aspx. It is a duplicate content problem.
If I dont Enable SSL then the https will return 404 (when I switch on the new DNN site), and any ranking value of the https page will be lost. If I enable Enforce SSL, then (theoretically!) DNN will redirect the https to the http, and the duplicate content problem will be solved.
But the question is - why does it close the connection? Anyone else with a similar problem can go to http://www.webrankinfo.com/english/tools/server-header.php to see if their connection is being closed too.
OM. | | | |
|