topic SSL Module URL Rewrite questions in Application Networking

SSL Module URL Rewrite questions

whitema — Tue, 19 Oct 2004 23:39:57 GMT

I'm migrating from an SCA to a CSM/SSL Proxy module.

I've run into an issue with the SSL Module and URL rewrites. It seems that it does not rewrite urls in the webpage itself.

The SCA has this functionality, and rewrites all https url's in a page to https. It has been working perfectly for us for some time.

The documentation on the SSL module says that it does not rewrite embedded URLs! Ack. This is terrible!

This means that web developers have to rewrite their code to have all urls say https, which is a LOT of work.

Does anyone know if what I am saying is correct? Is it on the roadmap to fix this to match the capabilities of the SCA?

Thanks!

Re: SSL Module URL Rewrite questions

jfoerster — Thu, 21 Oct 2004 08:28:52 GMT

Hi,

i think you are right and it is almost impossible in my opinion to fix this a HTML rewrite has to take palce and therefore the whole page has to be analysed. How should the SSL-Module determin if a HREF is wanted to be HTTPs or not. Image a HREF on your encrypted page pointing to a site which is not capable to run HTTPS. If rewriting this the link will fail. So in my opinion there is no way to do this.

sorry,

Joerg

Re: SSL Module URL Rewrite questions

whitema — Thu, 21 Oct 2004 18:17:30 GMT

The SCA does embedded URL rewrites right now.

I don't see why this functionality wasn't added to the SSL-proxy module from the beginning.

Since it is clear text to the origin server it would be easy to parse this and change all http: URLs to https:

Ahh well.