This is a migrated thread and some comments may be shown as answers.

CDN Issue with Off-loaded SSL

4 Answers 62 Views
ScriptManager and StyleSheetManager
This is a migrated thread and some comments may be shown as answers.
Dan Ehrmann
Top achievements
Rank 1
Dan Ehrmann asked on 12 Aug 2012, 02:29 PM
I had a problem with the script and style managers. My web site uses a separate box to handle SSL, so when requests get to my servers, they are always http. So the managers use http to access the CDN, However, if the requested page is actually secure, this cause mixed content warnings and failed pages.
However, this is not ideal. I would rather not have to hard-code your cdn urls in my app. It would be nice to have a property so I could tell the managers that they need to access the secure urls, even when the web server is handling an insecure request.

I resolved this by setting the BaseUrl property to the secure address

    CdnSettings-BaseUrl="https://d35islomi5rx1v.cloudfront.net"

However, this is not ideal. I would rather not have to hard-code your cdn urls in my app. It would be nice to have a property so I could tell the managers that they need to access the secure urls, even when the web server is handling an insecure request.

4 Answers, 1 is accepted

Sort by
0
Peter
Telerik team
answered on 15 Aug 2012, 09:12 AM
Hello Dan,

Thank you for your feedback. I will forward your suggestion to our development team to consider it.

All the best,
Peter
the Telerik team
If you want to get updates on new releases, tips and tricks and sneak peeks at our product labs directly from the developers working on the RadControls for ASP.NET AJAX, subscribe to their blog feed now.
0
Gary Davis
Top achievements
Rank 2
answered on 25 Oct 2012, 02:56 PM
I just had this issue too. We use an F5 load balancer to handle the SSL so when the websites get the request, it is no longer SSL. Our code can tell it was an SSL request by looking at an HTTP header set by the F5.

It would be nice to use this flag to tell the Telerik Script/StyleSheet Regestrars to use the SSL domains. We are using MVC extensions.

Thanks,
Gary Davis
0
Dimitar Terziev
Telerik team
answered on 30 Oct 2012, 12:18 PM
Hello Gary,

This forum is dedicated for RadControls for ASP.NET Ajax, in case you are using the MVC extensions my suggestion is to post your question in this forum here.

Greetings,
Dimitar Terziev
the Telerik team
If you want to get updates on new releases, tips and tricks and sneak peeks at our product labs directly from the developers working on the RadControls for ASP.NET AJAX, subscribe to their blog feed now.
0
Gary Davis
Top achievements
Rank 2
answered on 30 Oct 2012, 03:31 PM
Thanks, Dimitar.

I just added the post including a temporaray workaround here.

Gary
Tags
ScriptManager and StyleSheetManager
Asked by
Dan Ehrmann
Top achievements
Rank 1
Answers by
Peter
Telerik team
Gary Davis
Top achievements
Rank 2
Dimitar Terziev
Telerik team
Share this question
or