Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have an ASP.NET application working in HTTPS (SSL). This is working well in my local computer and Amazon AWS (production environment).

But when I host this application in office (for testing) some strange things happens.

  1. I can see the HTTPS in browser and the lock sign.

  2. Fiddler also shows that the output is encrypted and shows port 443.

  3. But HttpContext.Current.Request.IsSecureConnection returns false

  4. And HttpContext.Current.Request.Url.Scheme returns HTTP.

In the office we are using Juniper SSG firewall and TMG 2010 (Forefront Threat Management Gateway 2010). So server receives requests through Juniper and TMG 2010.

share|improve this question
    
iam publishing the site using non-http rule with a https listener which accepts connection on port 80 & port 443 with ssl certificate installed. –  user139626 Oct 4 '12 at 11:46
add comment

1 Answer

Check the TMG publishing rule and make sure you're not connecting to the backend server using plain HTTP.

It's possible to publish a site using an SSL listener but use plain HTTP for connecting from TMG to the server itself. In this case, as far as clients are concerned, the connection is secure. As far as the web server itself is concerned, the connection is unsecure.

share|improve this answer
    
if i publish using https rule with https listener i get the following error: This webpage has a redirect loop The webpage at subdomain.domainname.com has resulted in too many redirects. Clearing your cookies for this site or allowing third-party cookies may fix the problem. If not, it is possibly a server configuration issue and not a problem with your computer. Here are some suggestions: •Reload this webpage later. •Learn more about this problem. Error 310 (net::ERR_TOO_MANY_REDIRECTS): There were too many redirects. –  user139626 Oct 4 '12 at 11:53
    
Does your app do a redirect to an unsecured page at any point? –  Chris McKeown Oct 4 '12 at 12:26
    
No the app doesn't have any redirect's. –  user139626 Oct 4 '12 at 13:09
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.