Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSS11501S-C-K9 SSL Termination

This ia a new installation with a Tomcat Web server located behind the CSS, with HTTP running between the Tomcat and the CSS. The CSS is doing SSL termination.

The client web browser successfully connects to the default Tomcat home page using an HTTPS session via the CSS, but whenever the client selects certain links on the home page, such as the Tomcat Administation link, the browser automatically switches from HTTPS to HTTP, and the page fails to load because the CSS is not expecting an HTTP session from the client. What I'm not sure about is what is causing the client to switch from an HTTPS session to HTTP ?

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: CSS11501S-C-K9 SSL Termination

Hi, maybe is a problem here:

1. client requests https://domain/page

2. but server send to client 'redir' code to http://domain/page/ (slash at the end).

HTTP is correct, because server don't known something about SSL termination

try sniff connection between css and server, or css and client, if there any http redirect occurs.

solution: configure 'rewrite' on the css :)

http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_820/sslgd/terminat.htm#wp999332

martin

5 REPLIES
New Member

Re: CSS11501S-C-K9 SSL Termination

Hi, maybe is a problem here:

1. client requests https://domain/page

2. but server send to client 'redir' code to http://domain/page/ (slash at the end).

HTTP is correct, because server don't known something about SSL termination

try sniff connection between css and server, or css and client, if there any http redirect occurs.

solution: configure 'rewrite' on the css :)

http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_820/sslgd/terminat.htm#wp999332

martin

New Member

Re: CSS11501S-C-K9 SSL Termination

Hi Martin

Many thanks for the reply. This sounds exactly like the issue we are seeing. It'll be a couple of weeks before I am able to try your suggestion. I will let you know the outcome.

Russell

New Member

Re: CSS11501S-C-K9 SSL Termination

Hi Martin

Many thanks for the reply. This sounds exactly like the issue we are seeing. It'll be a couple of weeks before I am able to try your suggestion. I will let you know the outcome.

Russell

New Member

Re: CSS11501S-C-K9 SSL Termination

when you look at the source of the page that works, do all the links show up absolute (ie https://servername/content/page.php) or relative (ie /content/page.php)

New Member

Re: CSS11501S-C-K9 SSL Termination

The properties of the links show up as absolute i.e https://servername/content/page.php

441
Views
0
Helpful
5
Replies
CreatePlease login to create content