Urgent help please

Hello,

My site just did a redesign and now the SSL's do not work as desired
and I have no clue why. =20

Here is the scenario:

The Home page on initial connection is NOT using SSL.=20

I can select any noon SSL page and remain a noon SSL page

I select one of the 2 SSL pages and I get SSL (ie: https in the address
bar and the lock icon in the browser)

From this point on every page is now defined as SSL. I see this by
picking
any link on the page and the link displayed in the lower left corner is
listed as https. If I choose the link the address bar is https and the
lock icon appears.

The problem is that if I choose any of the links back to the Home page I
get the POP up "This page contains both secure and non secure item."

The address bar stays as https but the lock icon disappears.

No changes were made to the httpd.conf or ssl.conf files.

I have the following redirects in place and I can see the first 2
working when I enable rewrite logging.

I never see the 3rd one run.
=20
RewriteCond %{HTTPS} !=3Don
RewriteCond %{REQUEST_URI} ^.*/cf/store/.*
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]


## For Digsig
RewriteCond %{HTTPS} !=3Don
RewriteCond %{REQUEST_URI} ^.*/cf/digsig/.*
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]

## For Everything Else
RewriteCond %{HTTPS} =3Don
RewriteCond %{REQUEST_URI} ^.*/.*
RewriteRule ^/(.*) http://%{SERVER_NAME}/$1 [L,R]

Any suggestions as to what or where to look would be greatly
appreciated.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Urgent help please

This is a multi-part message in MIME format.

------=_NextPart_000_0036_01C7FAC1.138FECE0
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: 7bit



-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org]
On Behalf Of Jones, Stephen (SJONES)
Sent: Friday, August 03, 2007 10:16 AM
To: modssl-users@modssl.org
Subject: Urgent help please

Hello,

My site just did a redesign and now the SSL's do not work as desired
and I have no clue why.

Here is the scenario:

The Home page on initial connection is NOT using SSL.

I can select any noon SSL page and remain a noon SSL page

I select one of the 2 SSL pages and I get SSL (ie: https in the address
bar and the lock icon in the browser)

From this point on every page is now defined as SSL. I see this by
picking
any link on the page and the link displayed in the lower left corner is
listed as https. If I choose the link the address bar is https and the
lock icon appears.

The problem is that if I choose any of the links back to the Home page I
get the POP up "This page contains both secure and non secure item."

The address bar stays as https but the lock icon disappears.

No changes were made to the httpd.conf or ssl.conf files.

I have the following redirects in place and I can see the first 2
working when I enable rewrite logging.

I never see the 3rd one run.

RewriteCond %{HTTPS} !=on
RewriteCond %{REQUEST_URI} ^.*/cf/store/.*
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]


## For Digsig
RewriteCond %{HTTPS} !=on
RewriteCond %{REQUEST_URI} ^.*/cf/digsig/.*
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]

## For Everything Else
RewriteCond %{HTTPS} =on
RewriteCond %{REQUEST_URI} ^.*/.*
RewriteRule ^/(.*) http://%{SERVER_NAME}/$1 [L,R]

Any suggestions as to what or where to look would be greatly
appreciated.

Sorry for the delay.

"This page contains both secure and non secure item." means there are url
paths in page oontent (usually graphics...image sources for links and the
like) which are http (and need to be https). I'm not to familiar w/
mod_rewrite, but a guess is that your rules apply to actual links, but not
urls for content such as .gif or .jpg files.

Hope this helps.

lh..


------=_NextPart_000_0036_01C7FAC1.138FECE0
Content-Type: application/x-pkcs7-signature;
name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="smime.p7s"

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEH AQAAoIIO+jCCBDIw
ggMaoAMCAQICAQEwDQYJKoZIhvcNAQEFBQAwezELMAkGA1UEBhMCR0IxGzAZ BgNVBAgMEkdyZWF0
ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBwwHU2FsZm9yZDEaMBgGA1UECgwRQ29t b2RvIENBIExpbWl0
ZWQxITAfBgNVBAMMGEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczAeFw0wNDAx MDEwMDAwMDBaFw0y
ODEyMzEyMzU5NTlaMHsxCzAJBgNVBAYTAkdCMRswGQYDVQQIDBJHcmVhdGVy IE1hbmNoZXN0ZXIx
EDAOBgNVBAcMB1NhbGZvcmQxGjAYBgNVBAoMEUNvbW9kbyBDQSBMaW1pdGVk MSEwHwYDVQQDDBhB
QUEgQ2VydGlmaWNhdGUgU2VydmljZXMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+
QJ30buHqdoccTUVEjr5GyIMGncEq/hgfjuQC+vOrXVCKFjELmgbQxXAizUkt VGPMtm5oRgtT6stM
JMC8ck7q8RWu9FSaEgrDerIzYOLaiVXzIljz3tzP74OGooyUT59o8piQRoQn x3a/48w1LIteB2Rl
gsBIsKiR+WGfdiBQqJHHZrXreGIDVvCKGhPqMaMeoJn9OPb2JzJYbwf1a7j7 FCuvt6rM1mNfc4za
BZmoOKjLF3g2UazpnvR4Oo3PD9lC4pgMqy+fDgHe75+ZSfEt36x0TRuYtUfF 5SnR+ZAYx2KcvoPH
Jns+iiXHwN2d5jVoECCdj9je0sOEnA1e6C/JAgMBAAGjgcAwgb0wHQYDVR0O BBYEFKARCiM+lvEH
7OKvKe+CpX/QMKS0MA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ MHsGA1UdHwR0MHIw
OKA2oDSGMmh0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0FBQUNlcnRpZmljYXRl U2VydmljZXMuY3Js
MDagNKAyhjBodHRwOi8vY3JsLmNvbW9kby5uZXQvQUFBQ2VydGlmaWNhdGVT ZXJ2aWNlcy5jcmww
DQYJKoZIhvcNAQEFBQADggEBAAhW/ALwm+j/pPrWe8ZEgM5PxMX2AFjMpra8 FEloBHbo5u5d7AIP
YNaNUBhPJk4B4+awpe6/vHRUQb/9/BK4x09a9IlgBX9gtwVK8/bxwr/EuXSG ti19a8zS80bdL8bg
asPDNAMsfZbdWsIOpwqZwQWLqwwv81w6z2w3VQmH3lNAbFjv/LarZW4E9hvc POBaFcae2fFZSDAh
ZQNs7Okhc+ybA6HgN62gFRiP+roCzqcsqRATLNTlCCarIpdg+JBedNSimlO9 8qlo4KJuwtdssaMP
nr/raOdW8q7y4ys4OgmBtWuF174t7T8at7Jj4vViLILUagBBUPE5g5+V6TaW mG4wggTdMIIDxaAD
AgECAhBxkvvmGV+sTRKFdHE0ohinMA0GCSqGSIb3DQEBBQUAMHsxCzAJBgNV BAYTAkdCMRswGQYD
VQQIDBJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcMB1NhbGZvcmQxGjAY BgNVBAoMEUNvbW9k
byBDQSBMaW1pdGVkMSEwHwYDVQQDDBhBQUEgQ2VydGlmaWNhdGUgU2Vydmlj ZXMwHhcNMDQwMTAx
MDAwMDAwWhcNMjgxMjMxMjM1OTU5WjCBrjELMAkGA1UEBhMCVVMxCzAJBgNV BAgTAlVUMRcwFQYD
VQQHEw5TYWx0IExha2UgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO ZXR3b3JrMSEwHwYD
VQQLExhodHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20xNjA0BgNVBAMTLVVUTi1V U0VSRmlyc3QtQ2xp
ZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBFbWFpbDCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoC
ggEBALI5haTyfatBO2JGN67NwWB1vDll+UoaR6K5zEjMapjVTTUZuaRC5c5J 4oovHnzSMQfHTrSD
ZJ0uKdWiZMSFvYVRNXmkTmiQexx6pJKoF/KYFfKTzMmkMpW7DE8wvZigC4vl bhuiRvp4vKJvq1le
pS/Pytptqi/rrKGzaqq3Lmc1i3nhHmmI4uZGzaCl6r4LznY6eg6b6vzaJ1s9 cx8i5khhxkzzabGo
Lhu21DEgLLyCio6kDqXXiUP8FlqvHXHXEVnauocNr/rz4cLwpMVnjNbWVDre CqS6A3ezZcj9HtN0
YqoYymiTHqGFfvVHZcv4TVcodNI0/zC27vZiMBSMLOsCAwEAAaOCAScwggEj MB8GA1UdIwQYMBaA
FKARCiM+lvEH7OKvKe+CpX/QMKS0MB0GA1UdDgQWBBSJgmd9xJ0mcABLtFBI fN49rgRufTAOBgNV
HQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHSUEFjAUBggrBgEF BQcDAgYIKwYBBQUH
AwQwEQYDVR0gBAowCDAGBgRVHSAAMHsGA1UdHwR0MHIwOKA2oDSGMmh0dHA6 Ly9jcmwuY29tb2Rv
Y2EuY29tL0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDagNKAyhjBodHRw Oi8vY3JsLmNvbW9k
by5uZXQvQUFBQ2VydGlmaWNhdGVTZXJ2aWNlcy5jcmwwEQYJYIZIAYb4QgEB BAQDAgEGMA0GCSqG
SIb3DQEBBQUAA4IBAQCdlcs8uH6lCcQevwvCx3aOOTyUxhCqTwzJ4KuEXYlU 4GU7820cfDcsJVRf
liH8N4SRnRXcFE+Bz1Qda2xFYMct+ZdRTPlmyjyggoymyPDi6dRK+ew/Vsnd dozDggFPbADzHhph
dARHA6nGQFeRvGUixSdnT1fbZFrZjR+6hi/0Bq6cae3p9M8pF9jgSp8aIC+X TFG7RgfEijdOIOMJ
MWjHnsSLneh+EbwyaBCWEZhE2CpRYE2I63Q630MGMsg5Vow6EVLTQaRDA/Tt 7zMn2zngFE4mydj1
OeKJuJNdtykmQeqzm66D/Hd1yujKtf7iZUpjPkTE0MNeh3OpmByvfxV/MIIF 3zCCBMegAwIBAgIR
AO+aNKrZRSGJP6+TzGM+iPAwDQYJKoZIhvcNAQEFBQAwga4xCzAJBgNVBAYT AlVTMQswCQYDVQQI
EwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoTFVRoZSBV U0VSVFJVU1QgTmV0
d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3QuY29tMTYwNAYD VQQDEy1VVE4tVVNF
UkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgRW1haWwwHhcNMDcw MTMwMDAwMDAwWhcN
MDgwMTMwMjM1OTU5WjCB5TE1MDMGA1UECxMsQ29tb2RvIFRydXN0IE5ldHdv cmsgLSBQRVJTT05B
IE5PVCBWQUxJREFURUQxRjBEBgNVBAsTPVRlcm1zIGFuZCBDb25kaXRpb25z IG9mIHVzZTogaHR0
cDovL3d3dy5jb21vZG8ubmV0L3JlcG9zaXRvcnkxHzAdBgNVBAsTFihjKTIw MDMgQ29tb2RvIExp
bWl0ZWQxGDAWBgNVBAMTD0xpbmRzYXkgSGF1c25lcjEpMCcGCSqGSIb3DQEJ ARYabGluZHNheS5o
YXVzbmVyQGNvbW9kby5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGB AMa23GPPcE4rBNJ+
IqRJw5ynSm75t31AcqaUQXHnQeQJpdn3gX9SjtnUVdyrhZHwIE2fv/O5LMJl 58EgazGZHk5XoVC8
LmEsUBBSHmEgWIfKjYu4fyYnaIoNlxOFe93unULBPDjMU2lJDr319aLtJ8pv /iSb19RLTkkD8MJQ
ATazAgMBAAGjggJBMIICPTAfBgNVHSMEGDAWgBSJgmd9xJ0mcABLtFBIfN49 rgRufTAdBgNVHQ4E
FgQUPjZgh73bAK8kksszGcXwLfH0AowwDgYDVR0PAQH/BAQDAgWgMAwGA1Ud EwEB/wQCMAAwKgYD
VR0lBCMwIQYIKwYBBQUHAwQGCCsGAQUFBwMCBgsrBgEEAbIxAQMFAjARBglg hkgBhvhCAQEEBAMC
BaAwRgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAQEwKzApBggrBgEFBQcCARYd aHR0cHM6Ly9zZWN1
cmUuY29tb2RvLm5ldC9DUFMwgaUGA1UdHwSBnTCBmjBMoEqgSIZGaHR0cDov L2NybC5jb21vZG9j
YS5jb20vVVROLVVTRVJGaXJzdC1DbGllbnRBdXRoZW50aWNhdGlvbmFuZEVt YWlsLmNybDBKoEig
RoZEaHR0cDovL2NybC5jb21vZG8ubmV0L1VUTi1VU0VSRmlyc3QtQ2xpZW50 QXV0aGVudGljYXRp
b25hbmRFbWFpbC5jcmwwgYYGCCsGAQUFBwEBBHoweDA7BggrBgEFBQcwAoYv aHR0cDovL2NydC5j
b21vZG9jYS5jb20vVVROQWRkVHJ1c3RDbGllbnRDQS5jcnQwOQYIKwYBBQUH MAKGLWh0dHA6Ly9j
cnQuY29tb2RvLm5ldC9VVE5BZGRUcnVzdENsaWVudENBLmNydDAlBgNVHREE HjAcgRpsaW5kc2F5
LmhhdXNuZXJAY29tb2RvLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEApJGeQlxw tJpomriEFDeNWMNu
XXHfGfhtCl0V9xDrh8VWqi51KwFSq6tc2IkCDa5m5Sg1eq+1ngitHu3StjjN S+0lk3abnr+Dxq/l
pAQdXF/JalCJOxOn4Fpv69x9+8u21TvuHpzxCK99wm6Ey6D86VfjfjNFZNxF 4JKq/w6V9mVBOlB8
x+UxdsycY/8Hi37ZsSoPmZtGYPYINtT5FDtV7ZpNEvjHidDqN1xUCjBaiqdo O4p+htbyD8Ec2z+3
CB3tPrceXX3/XVm9Lx1tXwJLfQUXPyk7AvckQJUHkcwiHHwUtJwdY0UXvWmW 7ER3M7S88s9nJPkN
zYyXM+f9bX3YtTGCA+cwggPjAgEBMIHEMIGuMQswCQYDVQQGEwJVUzELMAkG A1UECBMCVVQxFzAV
BgNVBAcTDlNhbHQgTGFrZSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNU IE5ldHdvcmsxITAf
BgNVBAsTGGh0dHA6Ly93d3cudXNlcnRydXN0LmNvbTE2MDQGA1UEAxMtVVRO LVVTRVJGaXJzdC1D
bGllbnQgQXV0aGVudGljYXRpb24gYW5kIEVtYWlsAhEA75o0qtlFIYk/r5PM Yz6I8DAJBgUrDgMC
GgUAoIICeDAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJ BTEPFw0wNzA5MTkx
NzI5MTZaMCMGCSqGSIb3DQEJBDEWBBRW/ex65N8Uc88qnnKTbaXtOxVhXjBn BgkqhkiG9w0BCQ8x
WjBYMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIB QDAHBgUrDgMCBzAN
BggqhkiG9w0DAgIBKDAHBgUrDgMCGjAKBggqhkiG9w0CBTCB1QYJKwYBBAGC NxAEMYHHMIHEMIGu
MQswCQYDVQQGEwJVUzELMAkGA1UECBMCVVQxFzAVBgNVBAcTDlNhbHQgTGFr ZSBDaXR5MR4wHAYD
VQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxITAfBgNVBAsTGGh0dHA6Ly93 d3cudXNlcnRydXN0
LmNvbTE2MDQGA1UEAxMtVVROLVVTRVJGaXJzdC1DbGllbnQgQXV0aGVudGlj YXRpb24gYW5kIEVt
YWlsAhEA75o0qtlFIYk/r5PMYz6I8DCB1wYLKoZIhvcNAQkQAgsxgceggcQw ga4xCzAJBgNVBAYT
AlVTMQswCQYDVQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAc BgNVBAoTFVRoZSBV
U0VSVFJVU1QgTmV0d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1 c3QuY29tMTYwNAYD
VQQDEy1VVE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQg RW1haWwCEQDvmjSq
2UUhiT+vk8xjPojwMA0GCSqGSIb3DQEBAQUABIGARzY9iemVdya2ZEki7uoO szZPeRXl/skWYLc6
TbrOgXTjBFBbGob8dorRcbH2sR2IuIj5RdvrfDLuRSLWjjLDFq/jZ5yeNP1V 8a8qvIGkzBlWysaX
kpxCW2bYYy3Lw1JMmYKsXEYmBBwJUMZf8bI+Ot5gHTwcEf8WALRLLvnN8AAA AAAAAAA=

------=_NextPart_000_0036_01C7FAC1.138FECE0--

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Urgent help please

--0-2026516097-1190241350=:84352
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Pretty sure that is a browser issue and not a web site issue.

Lindsay Hausner wrote:=20

-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org=
]
On Behalf Of Jones, Stephen (SJONES)
Sent: Friday, August 03, 2007 10:16 AM
To: modssl-users@modssl.org
Subject: Urgent help please

Hello,

My site just did a redesign and now the SSL's do not work as desired
and I have no clue why. =20

Here is the scenario:

The Home page on initial connection is NOT using SSL.=20

I can select any noon SSL page and remain a noon SSL page

I select one of the 2 SSL pages and I get SSL (ie: https in the address
bar and the lock icon in the browser)

From this point on every page is now defined as SSL. I see this by
picking
any link on the page and the link displayed in the lower left corner is
listed as https. If I choose the link the address bar is https and the
lock icon appears.

The problem is that if I choose any of the links back to the Home page I
get the POP up "This page contains both secure and non secure item."

The address bar stays as https but the lock icon disappears.

No changes were made to the httpd.conf or ssl.conf files.

I have the following redirects in place and I can see the first 2
working when I enable rewrite logging.

I never see the 3rd one run.
=20
RewriteCond %{HTTPS} !=3Don
RewriteCond %{REQUEST_URI} ^.*/cf/store/.*
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]


## For Digsig
RewriteCond %{HTTPS} !=3Don
RewriteCond %{REQUEST_URI} ^.*/cf/digsig/.*
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]

## For Everything Else
RewriteCond %{HTTPS} =3Don
RewriteCond %{REQUEST_URI} ^.*/.*
RewriteRule ^/(.*) http://%{SERVER_NAME}/$1 [L,R]

Any suggestions as to what or where to look would be greatly
appreciated.

Sorry for the delay.

"This page contains both secure and non secure item." means there are url
paths in page oontent (usually graphics...image sources for links and the
like) which are http (and need to be https). I'm not to familiar w/
mod_rewrite, but a guess is that your rules apply to actual links, but no=
t
urls for content such as .gif or .jpg files.

Hope this helps.

lh..



=20
---------------------------------
Moody friends. Drama queens. Your life? Nope! - their life, your story.
Play Sims Stories at Yahoo! Games.=20
--0-2026516097-1190241350=:84352
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Pretty sure that is a browser issue and not a web site issue.

<=
i>Lindsay Hausner <lindsay.hausner@comodo.com> wrote: quote class=3D"replbq" style=3D"border-left: 2px solid rgb(16, 16, 255); =
margin-left: 5px; padding-left: 5px;">

-----Original Message-----=

From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl=
..org]
On Behalf Of Jones, Stephen (SJONES)
Sent: Friday, August 03,=
2007 10:16 AM
To: modssl-users@modssl.org
Subject: Urgent help ple=
ase

Hello,

My site just did a redesign and now the SSL's do=
not work as desired
and I have no clue why.

Here is the scen=
ario:

The Home page on initial connection is NOT using SSL.
r>I can select any noon SSL page and remain a noon SSL page

I sele=
ct one of the 2 SSL pages and I get SSL (ie: https in the address
bar =
and the lock icon in the browser)

From this point on every page is=
now defined as SSL. I see this
by
picking
any link on the page and the link displayed in the lowe=
r left corner is
listed as https. If I choose the link the address ba=
r is https and the
lock icon appears.

The problem is that if I =
choose any of the links back to the Home page I
get the POP up "This p=
age contains both secure and non secure item."

The address bar sta=
ys as https but the lock icon disappears.

No changes were made to =
the httpd.conf or ssl.conf files.

I have the following redirects i=
n place and I can see the first 2
working when I enable rewrite loggin=
g.

I never see the 3rd one run.

RewriteCond %{HTTPS} =
!=3Don
RewriteCond %{REQUEST_URI} ^.*/cf/store/.*
Rew=
riteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]

r>## For Digsig
RewriteCond %{HTTPS} !=3Don
RewriteCond=
%{REQUEST_URI} ^.*/cf/digsig/.*
RewriteRule ^/(.*) =
https://%{SERVER_NAME}/$1=20
[L,R]

## For Everything Else
RewriteCond %{HTTPS} =3D=
on
RewriteCond %{REQUEST_URI} ^.*/.*
RewriteRule ^/(.*) =
http://%{SERVER_NAME}/$1 [L,R]

Any suggestions as to what o=
r where to look would be greatly
appreciated.

Sorry for the del=
ay.

"This page contains both secure and non secure item." means th=
ere are url
paths in page oontent (usually graphics...image sources fo=
r links and the
like) which are http (and need to be https). I'm not =
to familiar w/
mod_rewrite, but a guess is that your rules apply to ac=
tual links, but not
urls for content such as .gif or .jpg files.
r>Hope this helps.

lh..

Re: Urgent help please

Actually more specifically a web site development issue. You most
likely have static links pointing to content in your web development
code (html, css, php, whatever language they have). mod_rewrite
doesn't rewrite your actual code, you need to do that.

An *example* would be .
When you attempt to access this on a secure page a certain web browser
(HINT: IE) goes all nutty and complains like you mention in your
original request. This is definitely not the correct place for the
problem you experience. A good & decent google search would've clued
you in on any of this. I highly suggest this website on how to use
Google: http://www.googleguide.com/

On 9/19/07, a k wrote:
> Pretty sure that is a browser issue and not a web site issue.
>
>
> Lindsay Hausner wrote:
>
>
> -----Original Message-----
> From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org]
> On Behalf Of Jones, Stephen (SJONES)
> Sent: Friday, August 03, 2007 10:16 AM
> To: modssl-users@modssl.org
> Subject: Urgent help please
>
> Hello,
>
> My site just did a redesign and now the SSL's do not work as desired
> and I have no clue why.
>
> Here is the scenario:
>
> The Home page on initial connection is NOT using SSL.
>
> I can select any noon SSL page and remain a noon SSL page
>
> I select one of the 2 SSL pages and I get SSL (ie: https in the address
> bar and the lock icon in the browser)
>
> From this point on every page is now defined as SSL. I see this by
> picking
> any link on the page and the link displayed in the lower left corner is
> listed as https. If I choose the link the address bar is https and the
> lock icon appears.
>
> The problem is that if I choose any of the links back to the Home page I
> get the POP up "This page contains both secure and non secure item."
>
> The address bar stays as https but the lock icon disappears.
>
> No changes were made to the httpd.conf or ssl.conf files.
>
> I have the following redirects in place and I can see the first 2
> working when I enable rewrite logging.
>
> I never see the 3rd one run.
>
> RewriteCond %{HTTPS} !=on
> RewriteCond %{REQUEST_URI} ^.*/cf/store/.*
> RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]
>
>
> ## For Digsig
> RewriteCond %{HTTPS} !=on
> RewriteCond %{REQUEST_URI} ^.*/cf/digsig/.*
> RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]
>
> ## For Everything Else
> RewriteCond %{HTTPS} =on
> RewriteCond %{REQUEST_URI} ^.*/.*
> RewriteRule ^/(.*) http://%{SERVER_NAME}/$1 [L,R]
>
> Any suggestions as to what or where to look would be greatly
> appreciated.
>
> Sorry for the delay.
>
> "This page contains both secure and non secure item." means there are url
> paths in page oontent (usually graphics...image sources for links and the
> like) which are http (and need to be https). I'm not to familiar w/
> mod_rewrite, but a guess is that your rules apply to actual links, but not
> urls for content such as .gif or .jpg files.
>
> Hope this helps.
>
> lh..
>
>
>
>
> ________________________________
> Moody friends. Drama queens. Your life? Nope! - their life, your story.
> Play Sims Stories at Yahoo! Games.
>
>
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Urgent help please

This is a multi-part message in MIME format.

--g55oQVFxAO3uuMYjNL2tPKeDndp7SveFnmHfcdC7ll1Pv=====
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Firefox will show you what links, images, etc are on a page and what protoco=
l they are using (http or https)

Kevin Klawon
203-675-5644


------Original Mail------
From: "Yvo van Doorn"
To:
Sent: Wed, 19 Sep 2007 16:59:03 -0700
Subject: Re: Urgent help please

Actually more specifically a web site development issue. You most
likely have static links pointing to content in your web development
code (html, css, php, whatever language they have). mod_rewrite
doesn't rewrite your actual code, you need to do that.

An *example* would be .
When you attempt to access this on a secure page a certain web browser
(HINT: IE) goes all nutty and complains like you mention in your
original request. This is definitely not the correct place for the
problem you experience. A good & decent google search would've clued
you in on any of this. I highly suggest this website on how to use
Google: http://www.googleguide.com/

On 9/19/07, a k wrote:
> Pretty sure that is a browser issue and not a web site issue.
>
>
> Lindsay Hausner wrote:
>
>
> -----Original Message-----
> From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org]=

> On Behalf Of Jones, Stephen (SJONES)
> Sent: Friday, August 03, 2007 10:16 AM
> To: modssl-users@modssl.org
> Subject: Urgent help please
>
> Hello,
>
> My site just did a redesign and now the SSL's do not work as desired
> and I have no clue why.
>
> Here is the scenario:
>
> The Home page on initial connection is NOT using SSL.
>
> I can select any noon SSL page and remain a noon SSL page
>
> I select one of the 2 SSL pages and I get SSL (ie: https in the address
> bar and the lock icon in the browser)
>
> From this point on every page is now defined as SSL. I see this by
> picking
> any link on the page and the link displayed in the lower left corner is
> listed as https. If I choose the link the address bar is https and the
> lock icon appears.
>
> The problem is that if I choose any of the links back to the Home page I
> get the POP up "This page contains both secure and non secure item."
>
> The address bar stays as https but the lock icon disappears.
>
> No changes were made to the httpd.conf or ssl.conf files.
>
> I have the following redirects in place and I can see the first 2
> working when I enable rewrite logging.
>
> I never see the 3rd one run.
>
> RewriteCond %{HTTPS} !=3Don
> RewriteCond %{REQUEST_URI} ^.*/cf/store/.*
> RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]
>
>
> ## For Digsig
> RewriteCond %{HTTPS} !=3Don
> RewriteCond %{REQUEST_URI} ^.*/cf/digsig/.*
> RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]
>
> ## For Everything Else
> RewriteCond %{HTTPS} =3Don
> RewriteCond %{REQUEST_URI} ^.*/.*
> RewriteRule ^/(.*) http://%{SERVER_NAME}/$1 [L,R]
>
> Any suggestions as to what or where to look would be greatly
> appreciated.
>
> Sorry for the delay.
>
> "This page contains both secure and non secure item." means there are url
> paths in page oontent (usually graphics...image sources for links and the
> like) which are http (and need to be https). I'm not to familiar w/
> mod_rewrite, but a guess is that your rules apply to actual links, but not=

> urls for content such as .gif or .jpg files.
>
> Hope this helps.
>
> lh..
>
>
>
>
> ________________________________
> Moody friends. Drama queens. Your life? Nope! - their life, your story.
> Play Sims Stories at Yahoo! Games.
>
>
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



--g55oQVFxAO3uuMYjNL2tPKeDndp7SveFnmHfcdC7ll1Pv=====
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


">

bottom: 4px">

Firefox will show you what links, images, etc are on a page and what prot=
ocol they are using (http or https)

Kevin Klawon
203-675-5644


------Original Mail------
From=
: "Yvo van Doorn" <yvo.vandoorn@gmail.com>
To: <modssl-users@mod=
ssl.org>
Sent: Wed, 19 Sep 2007 16:59:03 -0700
Subject: Re: Urgent =
help please

Actually more specifically a web site development issue. =
You most
likely have static links pointing to content in your web develop=
ment
code (html, css, php, whatever language they have). mod_rewrite
d=
oesn't rewrite your actual code, you need to do that.

An *example* wo=
uld be <img src=3D"http://www.example.com/example.jpg">.
When you a=
ttempt to access this on a secure page a certain web browser
(HINT: IE) g=
oes all nutty and complains like you mention in your
original request. Th=
is is definitely not the correct place for the
problem you experience. A =
good & decent google search would've clued
you in on any of this. I h=
ighly suggest this website on how to use
Google: http://www.googleguide.c=
om/

On 9/19/07, a k <you2bepie@yahoo.com> wrote:
> Pretty=
sure that is a browser issue and not a web site issue.
>
>
&=
gt; Lindsay Hausner <lindsay.hausner@comodo.com> wrote:
>
>=
;
> -----Original Message-----
> From: owner-modssl-users@modssl=
..org [mailto:owner-modssl-users@modssl.org]
> On Behalf Of Jones, Step=
hen (SJONES)
> Sent: Friday, August 03, 2007 10:16 AM
> To: mods=
sl-users@modssl.org
> Subject: Urgent help please
>
> Hell=
o,
>
> My site just did a redesign and now the SSL's do not work=
as desired
> and I have no clue why.
>
> Here is the scen=
ario:
>
> The Home page on initial connection is NOT using SSL.<=
BR>>
> I can select any noon SSL page and remain a noon SSL page >>
> I select one of the 2 SSL pages and I get SSL (ie: https in th=
e address
> bar and the lock icon in the browser)
>
> From=
this point on every page is now defined as SSL. I see this by
> picki=
ng
> any link on the page and the link displayed in the lower left cor=
ner is
> listed as https. If I choose the link the address bar is http=
s and the
> lock icon appears.
>
> The problem is that if =
I choose any of the links back to the Home page I
> get the POP up "Th=
is page contains both secure and non secure item."
>
> The addre=
ss bar stays as https but the lock icon disappears.
>
> No chang=
es were made to the httpd.conf or ssl.conf files.
>
> I have the=
following redirects in place and I can see the first 2
> working when=
I enable rewrite logging.
>
> I never see the 3rd one run.
&=
gt;
> RewriteCond %{HTTPS} !=3Don
> RewriteCond %{REQUEST_URI} ^=
..*/cf/store/.*
> RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R] >>
>
> ## For Digsig
> RewriteCond %{HTTPS} !=3Don
&=
gt; RewriteCond %{REQUEST_URI} ^.*/cf/digsig/.*
> RewriteRule ^/(.*) h=
ttps://%{SERVER_NAME}/$1 [L,R]
>
> ## For Everything Else
>=
; RewriteCond %{HTTPS} =3Don
> RewriteCond %{REQUEST_URI} ^.*/.*
&g=
t; RewriteRule ^/(.*) http://%{SERVER_NAME}/$1 [L,R]
>
> Any sug=
gestions as to what or where to look would be greatly
> appreciated. R>>
> Sorry for the delay.
>
> "This page contains both=
secure and non secure item." means there are url
> paths in page oont=
ent (usually graphics...image sources for links and the
> like) which =
are http (and need to be https). I'm not to familiar w/
> mod_rewrite,=
but a guess is that your rules apply to actual links, but not
> urls =
for content such as .gif or .jpg files.
>
> Hope this helps.
=
>
> lh..
>
>
>
>
> __________________=
______________
> Moody friends. Drama queens. Your life? Nope! - their=
life, your story.
> Play Sims Stories at Yahoo! Games.
>
>=
;
____________________________________________________________ __________<=
BR>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mail=
ing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.=
org