Internet Explorer over SSL

[sfarrow]

We just switch on SSL and are getting a prompt coming up in Internet Explorer:

"This page contains both secure and nonsecure items. Do you want to display the nonsecure items?"

Macromedia explains why the reason for the problem and proposes a solution:

http://www.macromedia.com/support/flash/ts/documents/https_error.htm


How do we control the HTML wrapping the Flash Player returned from the LPS?

[antun]

Just write your own wrapper page. See this Tip on how to do that:

http://www.laszlosystems.com/developers/community/forums/showthread.php?s=&threadid=25

-Antun

[sfarrow]

I have a servlet filter in place that checks the HTML wrapper and updates it if the request is SSL. Problem solved.

Unfortunately, my SSL request using IE is still causing some grief. Other browsers work fine under SSL and IE works fine without SSL. Here is the relevant information from the Jetty console. Any ideas?

- Request for /usr/local/Jetty-4.2.11aeb/webapps/aeb/lzx/queryTransactions.lzx
- GET request from: xxx.xxx.xxx.xxx
- Requesting object for /usr/local/Jetty-4.2.11aeb/webapps/aeb/lzx/queryTransactions.lzx
- IO exception while sending SWF: null
- Sending SWF, 147622 bytes
12:25:40.772 WARN!! Invalid length: Content-Length=147622 written=10240 for https://www.somehost.ca:8443/aeb/lzx/queryTransactions.lzx

[antun]

Can you tell me what version of the LPS you're using?

-Antun

[sfarrow]

I just installed 1.0.3 this morning. It was happening with versions as well.

[pablo]

Hi, can you tell me which version of the JVM you're using and what your application is doing? I've been trying to replicate the problem, but haven't been able so far.

Thanks,
pablo

[sfarrow]

Our webapp has in place filters to provide security and to decorate returned pages with an HTML header and footer to navigate the application.

These filters were affecting the content-length reported for swf requests. I have adapted the application to avoid the filters for lzx requests and resolved the issue.