Re: IIS on 2003 Server Cab Download in HTTPS problem.

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 11/01/03 

Date: Fri, 31 Oct 2003 21:32:28 -0800

It is not clear whether the problem is:
1. The server sends the CAB file to the client, but the client is rejecting
it for some reason
2. The server is not sending the CAB file.

To distinguish between the two, make a NetMon trace (this is included with
Windows Server 2003 as a component) between the server and client on two
different machines.

If you see the CAB file being sent via SSL back to the client, the problem
is somewhere on the client. If the CAB file is not being sent via SSL, then
you want to check out the IIS Web logs at
%SYSTEMROOT%\System32\LogFiles\HTTPERR\*.log and
%SYSTEMROOT%\System32\LogFiles\W3SVC#\*.log

I have found instances with IE6 where if it is configured to "do not cache
secure pages", it refuses to display a HTTPS URL (even though it downloaded
it). 

-- 
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Benjamin Stephens" <b.stephens@casemanagerpro.com> wrote in message
news:0c8601c39fc9$dfb57580$a401280a@phx.gbl...
We have an ActiveX CAB file that is part of an Active
Server Page web-based application.  It worked fine on
Server 2000 both in HTTP and HTTPS.  On migrating it to
Server 2003, it still works on HTTP however it will not
download under HTTPS to the browser.
The browser is IE 6.0 and has been configured with Low
security level to trusted sites.  The server has been
loaded as a trusted site in the client browser.
>From the server if I change the codebase of the <object>
tag to start "http://" the object downloads, installs, and
runs just fine.  I clear the object from the browser,
change the <object> tag to start "https://" (Absolutely no
other changes were made) and the browser puts the empty
box on the screen, showing the placeholder for the object,
but does not download it.
Again, this exact same code works under Server 2000 in
both HTTP and HTTPS.
BTW, I already have the workaround of using HTTP, but then
we get the pop-up warning that we are loading both secure
and unsecure objects into the page.
Any help would be greatly appreciated.
Thanks,
Benjamin Stephens

Relevant Pages

  • Re: What doesnt lend itself to OO?
    ... >> proxy and instructs the server to constuct the real object. ... rather than client code. ... If 'clock' is instantiated in the server, ... > for the server interface at the OOA level. ...
    (comp.object)
  • This is going straight to the pool room
    ... or not the client has privilege to do what they're trying to do, ... The server environment is this: ... 3GL User action Routines that Tier3 will execute on your behalf during the ... Routine Name: USER_INIT ...
    (comp.os.vms)
  • Re: HTTPSConnection script fails, but only on some servers (long)
    ... (HTTP/CONNECT + switch to HTTPS) ... wget and my python script. ... >>The python script works with server A, ... the problem seems to depend on both the client ...
    (comp.lang.python)
  • [Full-Disclosure] R: Full-Disclosure Digest, Vol 3, Issue 42
    ... Full-Disclosure Digest, Vol 3, Issue 42 ... SD Server 4.0.70 Directory Traversal Bug ... Arkeia Network Backup Client Remote Access ...
    (Full-Disclosure)
  • Re: What doesnt lend itself to OO?
    ... > rather than client code. ... no way to do that without also touching the object with clock semantics ... will not encapsulate both clock semantics and network semantics. ... The server can do whatever it wants ...
    (comp.object)
Quantcast