/ Zope / Apsis / Pound Mailing List / Archive / 2005 / 2005-02 / Lock Icon Missing in Browser Window for https

[ << ] [ >> ]

[ HTMLError patch / Ondra Kudlik ... ] [ Problem with redirect and referencing / Ondra ... ]

Lock Icon Missing in Browser Window for https
"Fat Bear Server Development" <server(at)fatbear.com>
2005-02-06 22:34:57 [ FULL ]
I've just started with pound and have created the following pound.cfg file:

ListenHTTP 11.22.33.44,80
ListenHTTPS 11.22.33.44,443 /path/to/my/pemfile.pem
LogLevel 0

UrlGroup ".*"
BackEnd 11.22.33.44,8088,1
EndGroup

where www.domain.com == 11.22.33.44

It all works except now when I have a URL such as:

    https://www.domain.com/index.html

I don't get the security "lock" icon at the bottom on the browser window.  This
icon is important so that people can know that the page is secure.

My apache (httpd-2.0.52 on RedHat 9.0 Linux) is listening on port 8088 and has
a VirtualHost directive for www.domain.com.  I have apache running with mpm
code that enables me to have each VirtualHost directive specify the
username/groupname that should be used (similar to the perchild mpm, but a
custom solution that avoids the problems in perchild).  This setting of uid/gid
only works for http requests, not https requests.  So, when I found out that
pound would translate from https to http, I was excited that this would solve
the problem of setting username/groupname even for https requests.  And, in
fact, it does.  The only consequence, so far as I can see, is that I don't see
the lock icon at the bottom of the browser window.

It really is a big deal to see this lock icon, so I'm hoping someone can say
how to make the lock icon appear!

Thanks,
Steve Amerige
Fat Bear Inc.

Re: Lock Icon Missing in Browser Window for https
Robert Segall <roseg(at)apsis.ch>
2005-02-07 19:02:43 [ FULL ]
On Sunday 06 February 2005 22:34, Fat Bear Server Development wrote:[...]

It could be that your browser cannot negotiate a common cipher with Pound - 
used to happen quite often with older versions of IE. Try adding the cipher 
list to your ListenHTTPS and see if it helps (an example appears in the 
README and on the Pound page).[...]

MailBoxer