--0-2026516097-1190241350=:84352
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Pretty sure that is a browser issue and not a web site issue.

Lindsay Hausner wrote:=20

-----Original Message-----
From: owner-modssl-users@modssl.org [mailtowner-modssl-users@modssl.org=
]
On Behalf Of Jones, Stephen (SJONES)
Sent: Friday, August 03, 2007 10:16 AM
To: modssl-users@modssl.org
Subject: Urgent help please

Hello,

My site just did a redesign and now the SSL's do not work as desired
and I have no clue why. =20

Here is the scenario:

The Home page on initial connection is NOT using SSL.=20

I can select any noon SSL page and remain a noon SSL page

I select one of the 2 SSL pages and I get SSL (ie: https in the address
bar and the lock icon in the browser)

From this point on every page is now defined as SSL. I see this by
picking
any link on the page and the link displayed in the lower left corner is
listed as https. If I choose the link the address bar is https and the
lock icon appears.

The problem is that if I choose any of the links back to the Home page I
get the POP up "This page contains both secure and non secure item."

The address bar stays as https but the lock icon disappears.

No changes were made to the httpd.conf or ssl.conf files.

I have the following redirects in place and I can see the first 2
working when I enable rewrite logging.

I never see the 3rd one run.
=20
RewriteCond %{HTTPS} !=3Don
RewriteCond %{REQUEST_URI} ^.*/cf/store/.*
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]


## For Digsig
RewriteCond %{HTTPS} !=3Don
RewriteCond %{REQUEST_URI} ^.*/cf/digsig/.*
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]

## For Everything Else
RewriteCond %{HTTPS} =3Don
RewriteCond %{REQUEST_URI} ^.*/.*
RewriteRule ^/(.*) http://%{SERVER_NAME}/$1 [L,R]

Any suggestions as to what or where to look would be greatly
appreciated.

Sorry for the delay.

"This page contains both secure and non secure item." means there are url
paths in page oontent (usually graphics...image sources for links and the
like) which are http (and need to be https). I'm not to familiar w/
mod_rewrite, but a guess is that your rules apply to actual links, but no=
t
urls for content such as .gif or .jpg files.

Hope this helps.

lh..



=20
---------------------------------
Moody friends. Drama queens. Your life? Nope! - their life, your story.
Play Sims Stories at Yahoo! Games.=20
--0-2026516097-1190241350=:84352
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Pretty sure that is a browser issue and not a web site issue.

<=
i>Lindsay Hausner <lindsay.hausner@comodo.com>
wrote: quote class=3D"replbq" style=3D"border-left: 2px solid rgb(16, 16, 255); =
margin-left: 5px; padding-left: 5px;">

-----Original Message-----=

From: owner-modssl-users@modssl.org [mailtowner-modssl-users@modssl=
..org]
On Behalf Of Jones, Stephen (SJONES)
Sent: Friday, August 03,=
2007 10:16 AM
To: modssl-users@modssl.org
Subject: Urgent help ple=
ase

Hello,

My site just did a redesign and now the SSL's do=
not work as desired
and I have no clue why.

Here is the scen=
ario:

The Home page on initial connection is NOT using SSL.
r>I can select any noon SSL page and remain a noon SSL page

I sele=
ct one of the 2 SSL pages and I get SSL (ie: https in the address
bar =
and the lock icon in the browser)

From this point on every page is=
now defined as SSL. I see this
by
picking
any link on the page and the link displayed in the lowe=
r left corner is
listed as https. If I choose the link the address ba=
r is https and the
lock icon appears.

The problem is that if I =
choose any of the links back to the Home page I
get the POP up "This p=
age contains both secure and non secure item."

The address bar sta=
ys as https but the lock icon disappears.

No changes were made to =
the httpd.conf or ssl.conf files.

I have the following redirects i=
n place and I can see the first 2
working when I enable rewrite loggin=
g.

I never see the 3rd one run.

RewriteCond %{HTTPS} =
!=3Don
RewriteCond %{REQUEST_URI} ^.*/cf/store/.*
Rew=
riteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]

r>## For Digsig
RewriteCond %{HTTPS} !=3Don
RewriteCond=
%{REQUEST_URI} ^.*/cf/digsig/.*
RewriteRule ^/(.*) =
https://%{SERVER_NAME}/$1=20
[L,R]

## For Everything Else
RewriteCond %{HTTPS} =3D=
on
RewriteCond %{REQUEST_URI} ^.*/.*
RewriteRule ^/(.*) =
http://%{SERVER_NAME}/$1 [L,R]

Any suggestions as to what o=
r where to look would be greatly
appreciated.

Sorry for the del=
ay.

"This page contains both secure and non secure item." means th=
ere are url
paths in page oontent (usually graphics...image sources fo=
r links and the
like) which are http (and need to be https). I'm not =
to familiar w/
mod_rewrite, but a guess is that your rules apply to ac=
tual links, but not
urls for content such as .gif or .jpg files.
r>Hope this helps.

lh..