Solved: CSS11501S-C-K9 SSL Termination

russ · ‎08-16-2007

This ia a new installation with a Tomcat Web server located behind the CSS, with HTTP running between the Tomcat and the CSS. The CSS is doing SSL termination.

The client web browser successfully connects to the default Tomcat home page using an HTTPS session via the CSS, but whenever the client selects certain links on the home page, such as the Tomcat Administation link, the browser automatically switches from HTTPS to HTTP, and the page fails to load because the CSS is not expecting an HTTP session from the client. What I'm not sure about is what is causing the client to switch from an HTTPS session to HTTP ?

Martin Kyrc · ‎08-16-2007

Hi, maybe is a problem here:

1. client requests https://domain/page

2. but server send to client 'redir' code to http://domain/page/ (slash at the end).

HTTP is correct, because server don't known something about SSL termination

try sniff connection between css and server, or css and client, if there any http redirect occurs.

solution: configure 'rewrite' on the css :)

http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_820/sslgd/terminat.htm#wp999332

martin

View solution in original post

Martin Kyrc · ‎08-16-2007

Hi, maybe is a problem here:

1. client requests https://domain/page

2. but server send to client 'redir' code to http://domain/page/ (slash at the end).

HTTP is correct, because server don't known something about SSL termination

try sniff connection between css and server, or css and client, if there any http redirect occurs.

solution: configure 'rewrite' on the css :)

http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_820/sslgd/terminat.htm#wp999332

martin

russ · ‎08-17-2007

Hi Martin

Many thanks for the reply. This sounds exactly like the issue we are seeing. It'll be a couple of weeks before I am able to try your suggestion. I will let you know the outcome.

Russell

russ · ‎08-17-2007

Hi Martin

Many thanks for the reply. This sounds exactly like the issue we are seeing. It'll be a couple of weeks before I am able to try your suggestion. I will let you know the outcome.

Russell

geseib · ‎08-17-2007

when you look at the source of the page that works, do all the links show up absolute (ie https://servername/content/page.php) or relative (ie /content/page.php)

russ · ‎08-17-2007

The properties of the links show up as absolute i.e https://servername/content/page.php