Solved

Apache - SSL

Posted on 2011-03-16
3
369 Views
Last Modified: 2012-08-13
I have recently enabled SSL security for my Apache web server. I am using weblogic as my app server. I didnt install any ssl certificate on my app server. Whenever I access my application, the following changes happen.

1) I hit the https URL. It reaches webserver.  - As a sign of encryption, the background of the url changes to pale yellow.
2) After login webserver handsover the request to the app server.  - Here the background changes to default white. Does it mean that the encrytion is topping when the request reaching the application server?

I am in an assumption that if web server is https enabled, all the requests/responses flowing through it will be encrypted nomatter how many application-servers or database-servers or content servers involved in the transaction.
Am I right or wrong? Plesae clarify!!!!
0
Comment
Question by:Raz
  • 2
3 Comments
 
LVL 57

Expert Comment

by:giltjr
Comment Utility
Does the URL change to http?  Or does it stay https?

Are all of your href's relative or absolute?
0
 

Author Comment

by:Raz
Comment Utility
all the urls have been changed to https. Everything is working fine here. The url remains https even after the request reaches app server. But the background color of the url changes back to white. Thats what concerns me.
0
 
LVL 57

Accepted Solution

by:
giltjr earned 500 total points
Comment Utility
As long as the URL says https and all of your hrefs are relative your SSL'ed.

Your browser should also show you if it is encrypted (SSL'ed) or not by showing a lock.

Now some browsers (like Firefox) may show a warning along with the lock if there is mixed contents (SSL'ed and non-SSL'ed).  This means some of the content on the page was retrieved without SSL.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

As Wikipedia explains 'robots.txt' as -- the robot exclusion standard, also known as the Robots Exclusion Protocol or robots.txt protocol, is a convention to prevent cooperating web spiders and other web robots from accessing all or part of a websit…
So you need a certificate so you can offer SSL encryption.  But which one should you get?  There are so many choices out there! Here is a generic overview of the main types of SSL certificates sold by the majority of commercial Certification Auth…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now