SSL CDN Support for MVC Controls

[Aaron]

Hi,

My sites are HTTPS, however are behind a load balancer which terminates the SSL connection, so the Telerik script manager for MVC controls loads the non-SSL CDN endpoint. I can't seem to find a way to force SSL connections for MVC CDN assets.

I am using the following syntax to register the scripts:

<%= Html.Telerik()
        .ScriptRegistrar()
        .DefaultGroup(group => group.UseTelerikContentDeliveryNetwork(true))
%>

How do I force SSL?

Thanks,

Aaron

[Atanas Korchev]

Hello,

 The ScriptRegistrar should manually detect SSL connection by checking the IsSecureConnection property. Can you confirm that the value of this property is correctly set to true at runtime?

All the best,
Atanas Korchev
the Telerik team

[Aaron]

Hi, as I mentioned, the load balancer terminates the SSL connection so the connection to my web server is not secure. The IsSecureConnection property returns false.

I need a way to force an HTTPS CDN connection.

Thanks,

Aaron

[Atanas Korchev]

Hello Aaron,

 This is not currently possible without modifying the source code. You basically need to find all places where IsSecureConnection is used and replace it with true.

Regards,
Atanas Korchev
the Telerik team

[Aaron]

How would I do that? IsSecureConnection is a read only property, there is no setter method. http://msdn.microsoft.com/en-us/library/system.web.httprequest.issecureconnection.aspx

[Atanas Korchev]

Hi Aaron,

 You need to modify the source code of Telerik Extensions for ASP.NET MVC so it does not use the IsSecureConnection property.

All the best,
Atanas Korchev
the Telerik team

[Gary Davis]

I just had this issue too. We use an F5 load balancer to handle the SSL so when the websites get the request, it is no longer SSL. Our code can tell it was an SSL request by looking at an HTTP header set by the F5.

It would be nice to use this flag to tell the Telerik Script/StyleSheet Regestrars to use the SSL domains. We are using MVC extensions.

For a workaround for now (not requiring rebuilding the source), on the page that uses SSL, I used HttpWatch to see which scripts and css files were being pulled in with http instead of https and created a telerik.js and telerik.css file containing the contents of the files combined. I then added this to the script/stylesheet manager statements (.css shown, similar for .js):

.DefaultGroup(group => group
   .ContentDeliveryNetworkUrl("~/content/css/telerik.css")

This is not optimal but will work for now. One other thing, there is a sprite.png that also needs to be in the local project with edits to the .css to reference the png.

What I would like is to have a new property to allow setting and passing the flag like .DefaultGroup().IsSecureConnection(variable). Of course this would be adding the option to the source code and updates to all references that use the current IsSecureConnection.

Thanks,
Gary Davis