Environment
Novell Access Manager 3.1 SSLVPN Server
Novell Access Manager 3 SSLVPN Server
Novell Access Manager 3 Support Pack 4 applied
Novell Access Manager 3.1 Interim Release 2 applied
Novell Access Manager 3 SSLVPN Server
Novell Access Manager 3 Support Pack 4 applied
Novell Access Manager 3.1 Interim Release 2 applied
Situation
Whilst accessing the sslpvn server from an IE6 browser, users get prompted about accessing non-secure content, specifically
"This page contains both secure and nonsecure items"
IE7 and Firefox do not cause a problem.
"This page contains both secure and nonsecure items"
IE7 and Firefox do not cause a problem.
Resolution
Modify the index.jsp file (/var/opt/novell/tomcat5/webapps/sslvpn/index.jsp) and replace the "about:blank" string with a link to a fictional
page (relative to the existing https connection) e.g. "blank.html".
This index.jsp file, which the browser receives when accessing /sslvpn/login, has 2 frames defined at the bottom of the page. They specify a src of "about:blank" which is apparently fine (IE7 and Firefox are happy). However, IE6 assumes that a frame is http unless explicitly told otherwise. The workaround to point to a fictional page (relative to the existing https connection) prevents this - it doesn't matter whether this fictional file exists or not
This index.jsp file, which the browser receives when accessing /sslvpn/login, has 2 frames defined at the bottom of the page. They specify a src of "about:blank" which is apparently fine (IE7 and Firefox are happy). However, IE6 assumes that a frame is http unless explicitly told otherwise. The workaround to point to a fictional page (relative to the existing https connection) prevents this - it doesn't matter whether this fictional file exists or not