Ajaxified Rad Scheduler with SSL causes "This page contains both secure and non-secure items..."

[David]

Hello,$0$0$0$0I am using the RadScheduler from the 2007.3.1218.20 build, and have encountered a problem when running my website with an SSL certificate.  When I load up the scheduler's page, everything is fine.  However, when I double click a time slot to open a new appointment, or when I switch between Day/Week/Month views, basically anything that causes the first asynchronous post back, I get the "This page contains both secure and non-secure items..." prompt.$0$0$0$0$0I had the scheduler inside a RadAjaxPanel from the same build, and noticed that when I removed the scheduler from the ajax panel, there was no such prompt, in other words if the scheduler is not ajaxified then it runs fine under SSL.  I then used a RadAjaxManager from the same build to ajaxify it, wondering if it had something to do with the ajax panel, but no, unfortunately it resulted in the same prompt.$0$0$0$0$0I then made an entirely new page, dropped the RadScheduler onto it, gave it a datasource, and ajaxified it with an ajax manager, wondering if perhaps it had something to do with my edit/insert templates in the Scheduler on the actual page.  This is not the case, as even with this bare-bones Scheduler page the SSL prompt still occurrs.  If I disable ajax on the Scheduler, then it works fine.$0$0$0$0$0I know that this version of the Rad Toolkit probably isn't supported anymore, but I basically have two questions:$0$01) Is this a known genuine issue with the RadScheduler or Ajax capabilities of this toolkit version?$02) If so, is there a workaround for this?$0$0$0$0Thanks for the replies.$0

[David]

I also forgot to mention that it doesn't matter what Skin I use on the control either, even the default yields the same security prompt.$0$0$0$0By the way, I am using Google Chrome to post this and noticed that in my previous post (and possibly this one too) the text has a bunch of weird characters $0$0$0 all over the place.$0

[David]

Anyone there?

[T. Tsonev]

Hello David,

We tried to reproduce the problem here, but without success. We will need to identify the the problematic resources that are requested through HTTP instead of HTTPS. It will be great if you can provide us with a live URL, so we can try to diagnose the problem. Alternatively, you can use a tool like Firebug to monitor the requested resources and find the ones that are not requested securely.

Greetings,
Tsvetomir Tsonev
the Telerik team

Check out Telerik Trainer, the state of the art learning tool for Telerik products.

[David]

Hello, I am using HttpWatch and monitored the requests as you suggested.  Firefox doesn't complain about any such problem at all.

Anyway, using HttpWatch it shows every single request as HTTPS.  Here was the outcome as follows that generated the mixed content warning in IE:

	+ 0.000     0.207   2182    17076   POST    200 text/plain; charset=utf-8   https://<domain name>/Calendar.aspx
	+ 0.216     0.020   1370    283 GET 404 text/html   https://<domain name>/cation.add_init(function()%20%7B%20%20%20%20$create(Telerik.Web.UI.RadAjaxManager
	+ 0.217     0.071   1342    283 GET 404 text/html   https://<domain name>/%7BajaxSettings:[%7BInitControlID%20:%20RadScheduler1
	+ 0.219     0.038   1338    283 GET 404 text/html   https://<domain name>/UpdatedControls%20:%20[%7BControlID:RadScheduler1
	+ 4.458     0.001   0   0   GET (Cache) text/javascript https://<domain name>/ScriptResource.axd?d=LQp_55rk6f9FYHjz5eLgxBy3GZFUD4MjARC0rDXgva7-S2_ReBwkERjA0XCyQhAy8EnqSQSX4D6thkKV0bTunw2&t=633570174260000000
	+ 4.461     0.001   0   0   GET (Cache) text/javascript https://<domain name>/ScriptResource.axd?d=LQp_55rk6f9FYHjz5eLgxBy3GZFUD4MjARC0rDXgva4rSrSXx3fyMVxGOu-aaf2M7Bg3Le9ur1h9BjSLnhSDdQ2&t=633570174260000000
	+ 4.463     0.002   0   0   GET (Cache) text/javascript https://<domain name>/ScriptResource.axd?d=LQp_55rk6f9FYHjz5eLgxBy3GZFUD4MjARC0rDXgva6AhoM1vGhEHF-PIGtmYezVnVFdMHu4toARU2A-dE9SAQ2&t=633570174260000000
	+ 4.468     0.001   0   0   GET (Cache) text/javascript https://<domain name>/ScriptResource.axd?d=LQp_55rk6f9FYHjz5eLgxMpkwwU3hOFe70LcBPG1RUNhn2VrBgdIgRlUza-5ikgJ5lxdMbIas2DaDYGOrAypIg2&t=633570174260000000
	+ 4.471     0.001   0   0   GET (Cache) text/javascript https://<domain name>/ScriptResource.axd?d=LQp_55rk6f9FYHjz5eLgxMpkwwU3hOFe70LcBPG1RUPFfJ6bmoFxwhhyJLOBi0fHw6i7h2r1DswqRXoLA8bxSA2&t=633570174260000000
	+ 4.473     0.001   0   0   GET (Cache) text/javascript https://<domain name>/ScriptResource.axd?d=LQp_55rk6f9FYHjz5eLgxMpkwwU3hOFe70LcBPG1RUOi-03S_1Q7mzn1TkdAaDWSqBU0-8gXBHiVytHaa-EYpfU59gydIusXvMnUCCp66sw1&t=633570174260000000
	+ 4.475     0.001   0   0   GET (Cache) text/javascript https://<domain name>/ScriptResource.axd?d=LQp_55rk6f9FYHjz5eLgxFPZ3H77acJg3ZV7jghZpJDG5O3Tukt4IYLP94MeOhn40&t=633570174260000000

Thank you for your continued efforts in assisting me.

[T. Tsonev]

Hello David,

Thank you for the detailed request dump. Notice the strange requests that return 404 errors. They are, in fact, misinterpreted JavaScript that is being requested as a resource by the browser. This is a known issue with RadAjaxManager that has been fixed. Please, update to the latest version (2008.2 826) and the problem should disappear. Alternatively you can set EnablePageHeadUpdate="false" on the RadAjaxManager. Sorry for the inconvenience.

Kind regards,
Tsvetomir Tsonev
the Telerik team

Check out Telerik Trainer, the state of the art learning tool for Telerik products.