(HTTPS) Download functionality fails in IE

[armedia]

Hello,

The download function in alfresco breaks down when we force the users to go thru "HTTPS" security constraint.

Example : Document (*.pdf) can open or download in Firefox 3.0 allright.

When I open the same http site with the same user via IE 6 & 7 get an error message "Internet Explorer could not open the internet site"

This happens with both standard http (redirected to https) and with the direct "https" .

The modified code in "web.xml" is defined below:


   

<security-constraint>
        <web-resource-collection>
            <web-resource-name>HTTPSOnly</web-resource-name>
            <url-pattern>/*</url-pattern>
        </web-resource-collection>
        <user-data-constraint>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
    </security-constraint>‍‍‍‍‍‍‍‍‍

[invictus9]

HTTPS (HTTP over a secure socket layer (SSL)) sends data that is protected by information in a certificate. The certificate (or certificate of authority) is issued by some authority, such as Verisign, Thawte, or even your local company.

IE handles certifications of authority differently than does Firefox. If your CoA is locally issued, you have to provide the information to IE to allow it to trust sites that use that certificate. Better known authorities, like Verisign, have certificates already installed in IE. Another possibility is how your IE installation handles wildcard certificates.

[armedia]

The certs seem to have properly installed.

The solution is that to place a web server in front of the existing app server and make the webserver handle the SSL protocols therby make the tomcat app server communication seamless.

This solved the problem.

Thanks all.