Security warnings displayed on every finder result page

sknmail@rediffmail.com · #1 (**permalink**) October 22nd, 2007, 21:54

Hi,

The current setup which was migrated from 5.0 (This setup also had https enabled) to 5.5CU3+RU2 is having https enabled. However in every finder result page opened in a frame, we are able to view the warning popup saying "This page contains both secure and nonsecure items. Do you want to display the nonsecure items?"

we have configured the https properly and also the glog.webserver.URL is going as https:// on all the servers.

However even then its passing as unsecured. Our browser is having display mixed content value as prompt. However other otm site with https enabled is not displaying while this server is showing this warning message.

Does anybody have any idea on this problem. If anybody can point out some configuration missing for this issue will be apprieciated.

Thanks in advance.

Regards,
Suresh

chrisplough · #2 (**permalink**) October 25th, 2007, 23:05

Suresh,

I'm not sure exactly why this is happening - if you have taken care of the following:

Update the glog.webserver.URL property for each OTM server (web, app, etc)
Installed a real SSL cert, rather than the demo one included with OTM
Are accessing OTM directly and not through a reverse-proxy or SSO framework
Are testing on stock OTM screens

It sounds like you've covered all of the above -- so I'd recommend installing a network sniffer on a workstation and capturing the packets while duplicating the error. You shouldn't be able to view the contents of https traffic, but you will be able to view the http traffic -- which will give some valuable hints on what content is causing the issue.

I recommend Wireshark - Wireshark: What's on your network?

Thanks!
--Chris

sknmail@rediffmail.com · #3 (**permalink**) October 26th, 2007, 20:52

Hi Chris,

Thanks Very much for these points to check on.. As you mentioned, let me please try to install and use the tool Wireshark you suggested.

Regards,
Suresh

Shells · #4 (**permalink**) November 15th, 2007, 20:40

Hey Suresh, we had that issue on one of our test sites. We got rid of the message by going into internet options and checking enable on Display Mixed Content. I know that is just a workaround, but it will get rid of the annoyance

Thanks,

Shell

sknmail@rediffmail.com · #5 (**permalink**) November 21st, 2007, 02:00

Thanks Shell for the workaround.. well still the root cause is not fixed.. seems to be a bug or some configuration missing the application.

-Suresh