topic Re: CSS Redirection problem in Application Networking

CSS Redirection problem

cdicesare — Wed, 06 Feb 2008 10:52:33 GMT

Hello,

I use a CSS 11500. I've problem of redirection HTTPS with Mozilla and Opera (it seems there are no problem with Internet Explorer).

Mozilla use a URL http://www.example.com:443/blabla instead of https://www.example.com/blabla.

Here my CSS configuration

ssl-proxy-list SSL-PROXY

ssl-server 20

ssl-server 20 cipher rsa-with-rc4-128-md5 XXXXXXXXXXXXXX

ssl-server 20 vip address X.X.X.X

ssl-server 20 rsacert certXXXX

ssl-server 20 rsakey keyXXXX

ssl-server 21

ssl-server 21 cipher rsa-with-rc4-128-md5 X.X.X.X 80

ssl-server 21 rsacert certXXX

ssl-server 21 rsakey keyXXX

ssl-server 21 vip address X.X.X.X

ssl-server 20 http-header prefix "SSL"

ssl-server 20 urlrewrite 1 www.example.com sslport 443 clearport 80

active

Thank you in advance for your help

Cedric

Re: CSS Redirection problem

Gilles Dufour — Wed, 06 Feb 2008 12:07:26 GMT

I don't see why the response would be different for IE and mozilla.

Can you get us a sniff of the server traffic, to see what the redirect looks like.

Gilles.

Re: CSS Redirection problem

cdicesare — Thu, 07 Feb 2008 12:29:48 GMT

Indeed, the problem isn't the web navigator after to deep with tcpdump.

The problem is it misses the / at the end of the URL !

https://xxx.example.com/blabla => the redirect doesn't work => http://www.example.com:443/blabla

https://xxx.example.com/blabla/ => the redirect work !!

Our customer don't wish modify their webserver apache. It's possible to find a solution with the CSS ? With a specifiq redirector rule ?

Thank you in advance

Best Regards

CÃ©dric

Re: CSS Redirection problem

Gilles Dufour — Thu, 07 Feb 2008 12:50:31 GMT

Cedric,

create a rule like this

owner ....

content redirect1

vip address x.x.x.x

port 80

url "/blabla"

redirect "https://...../blabla/"

active

Gilles.

Re: CSS Redirection problem

David Coupez — Tue, 12 Feb 2008 15:33:18 GMT

And you should probably add a wildcard to ensure your redirect will work for every addresses used.

Re: CSS Redirection problem

Gilles Dufour — Tue, 12 Feb 2008 16:58:35 GMT

NO !!!!!

do not put a wildcard as it would match the redirect link as well and you will enter in a loop.

Just copy it the way it is.

Gilles

CSS/CSM/ACE Guru