Groups | Blog | Home
all groups > iis security > february 2006 >

iis security : SSL


janetb
2/14/2006 10:54:54 AM
I have a site comprised most of asp pages with ss includes for the headers,
footers, etc. I have a Verisign ceritficate installed. On the page
requiring the certificate, a prompt is given saying some of the site is not
secure do you want to display yes/no. I've tried yes and no and can not see
a difference. I've made any images on the includes hard links using https:.
All images are located on the same server.

Ken Schaefer
2/15/2006 12:00:00 AM
I don't think this is an IIS question.

Somewhere in your page there is a request to a non-SSL resource somewhere.
That is what is causign the browser to generate the prompt.

Can you post the HTML source?

Cheers
Ken

[quoted text, click to view]
:I have a site comprised most of asp pages with ss includes for the headers,
: footers, etc. I have a Verisign ceritficate installed. On the page
: requiring the certificate, a prompt is given saying some of the site is
not
: secure do you want to display yes/no. I've tried yes and no and can not
see
: a difference. I've made any images on the includes hard links using
https:.
: All images are located on the same server.
:
: Any ideas?

Ratatooie
2/15/2006 8:40:23 AM
Check for the flash detection script.

If you use a SWF (shockwave) or fl? (flash), the application gives you some
code, one of which checks the version the client has installed against the
macromedia.com server. That could be causing the problem.

Just go into the flash code and pull that line out. (It won't hurt, people
get that done so many times elsewhere you don't need it on your site.)

Also check for absolute links anywhere in your site. You should be using
absolute "from the root" links, starting with a slash and using the whole
path... i.e NOT ../images/image.gif but rather /images/image.gif and just
"/" for the home page link.

[quoted text, click to view]

AddThis Social Bookmark Button