[thelist] IE and redirect to SSL

[Bill Moseley]

Well, this is an obscure bug, so no point keeping this thread going.

On Thu, Jun 22, 2006 at 04:02:16PM +0100, Lee kowalkowski wrote:
> On 22/06/06, Bill Moseley <moseley at hank.org> wrote:
> > $ GET -Sd http://infopeople.org:82/login
> > GET http://infopeople.org:82/login --> 302 Found
> > GET https://infopeople.org:1443/login --> 200 OK
> 
> You haven't said you've got a problem fetching the HTML, but the CSS,
> JS and images.  What do these requests look like (when from IE)?

They look wrong, although I only have ethereal and it can't decode
the encrypted requests (I think there's away, though.)

I edited Apache's config to create to access.log files, one for each
port.

What happens is I see the request to /login in the non-ssl log and I
see Apache return the 302.

Then I see IE make the request to /login in the ssl log file.  This
html page is returned correctly to IE and view source in IE show it
as I'd expect with correct links.  .  e.g.

    https://bumby:1443/style.css

But I see those weird log entries in Apache log for port *82*.

192.168.1.32 - - [22/Jun/2006:10:36:10 -0700] "\x16\x03" 200 7747 "-" "-"
192.168.1.32 - - [22/Jun/2006:10:36:10 -0700] "\x16\x03" 200 7741 "-" "-"
192.168.1.32 - - [22/Jun/2006:10:36:11 -0700] "\x16\x03" 200 7747 "-" "-"
192.168.1.32 - - [22/Jun/2006:10:36:11 -0700] "\x16\x03" 200 7741 "-" "-"
192.168.1.32 - - [22/Jun/2006:10:36:10 -0700] "\x16\x03" 200 7741 "-" "-"
192.168.1.32 - - [22/Jun/2006:10:36:11 -0700] "\x16\x03" 200 7743 "-" "-"
192.168.1.32 - - [22/Jun/2006:10:36:11 -0700] "\x16\x03" 200 7741 "-" "-"
192.168.1.32 - - [22/Jun/2006:10:36:11 -0700] "\x16\x03" 200 7743 "-" "-"

My *guess* is IE is encrypting the the requests (for style.css, etc)
but then sending out the request on the wrong socket.

I wondered about KeepAlives, so I disabled KeepAlives and that didn't fix it.

Oh well, just something to remember when testing on non-standard
ports with IE -- an event that doesn't happen very often, thankfully.






-- 
Bill Moseley
moseley at hank.org