CDN Issue with Off-loaded SSL

[Dan Ehrmann]

I had a problem with the script and style managers. My web site uses a separate box to handle SSL, so when requests get to my servers, they are always http. So the managers use http to access the CDN, However, if the requested page is actually secure, this cause mixed content warnings and failed pages.
However, this is not ideal. I would rather not have to hard-code your cdn urls in my app. It would be nice to have a property so I could tell the managers that they need to access the secure urls, even when the web server is handling an insecure request.

I resolved this by setting the BaseUrl property to the secure address

    CdnSettings-BaseUrl="https://d35islomi5rx1v.cloudfront.net"

However, this is not ideal. I would rather not have to hard-code your cdn urls in my app. It would be nice to have a property so I could tell the managers that they need to access the secure urls, even when the web server is handling an insecure request.

[Peter]

Hello Dan,

Thank you for your feedback. I will forward your suggestion to our development team to consider it.

All the best,
Peter
the Telerik team

[Gary Davis]

I just had this issue too. We use an F5 load balancer to handle the SSL so when the websites get the request, it is no longer SSL. Our code can tell it was an SSL request by looking at an HTTP header set by the F5.

It would be nice to use this flag to tell the Telerik Script/StyleSheet Regestrars to use the SSL domains. We are using MVC extensions.

Thanks,
Gary Davis

[Dimitar Terziev]

Hello Gary,

This forum is dedicated for RadControls for ASP.NET Ajax, in case you are using the MVC extensions my suggestion is to post your question in this forum here.

Greetings,
Dimitar Terziev
the Telerik team

[Gary Davis]

Thanks, Dimitar.

I just added the post including a temporaray workaround here.

Gary