Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > Zimbra Collaboration Suite > Administrators

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 10-06-2009, 10:36 PM
j2b j2b is offline
Special Member
 
Posts: 109
Exclamation [SOLVED] HTTP/HTTPS strange behavior on different systems and browsers

Hi, I recently made an upgrade from 5.0.18 -> 6.0.1 and added test SSL certificate from Comodo. I deployed SSL certificate on our Reverse Proxy servers (for load balancing). Communications after RP serversa to Zimbra mailbox are made on HTTPS too, but only with self signed certificate. Everything seems to work fine, except some items:

* Firefox 3.5.3 on Mac OS X - no problem;
* Win XP IE8 - all pages are encrypted (the lock in address bar is ok), but on first opening (after login) IE informs about situation, that there are non https items on page to load, which is strange, because all the way arround we use SSL and HTTPS, including Zimbra protocol configuration;
* Win XP Firefox 3.5.3 - working, but only it says, that traffic is encrypted only on login page. After successfull login, system stays on https url, but informs user, that traffic is not encrypted on this site.

Does somebody experience similar & what could be your ideas on problem root?

Real login URL and certificate is tied to Reverse Proxy (Apache) virtual host, but mailbox hostname is different. Before have not noticed such things.
Reply With Quote
  #2 (permalink)  
Old 03-25-2011, 01:10 PM
j2b j2b is offline
Special Member
 
Posts: 109
Default

To close this issue as solved, if anybody is looking for the same:

This situation happens, when you deploy zimlets, which use external services via http, or your user opens e-mail message, which has embedded content, like images, downloaded from external http site. This is notice about the fact, that only part of information is encrypted, still keeping your connection to ZCS server under https. To be more sure, please use Firefox Firebug extension in Net folder, to go through all resources ZCS loads on page, to catch out those, which are loaded via pure http (without https), to deal with this issue further.
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com




 

SEO by vBSEO ©2011, Crawlability, Inc.