For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

roggy32_78322's avatar
roggy32_78322
Icon for Nimbostratus rankNimbostratus
Sep 14, 2009

Redirecting out of HTTPS

I want to redirect out of https if the customer is in https and clicks on certain links or request is in a list of uri that are not in my https strings list. but I don't want to to be redirected if th...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Sep 15, 2009

Posted By robert.henson@fishnetsecurity.com on 09/15/2009 7:34 AM

 

So, there wouldn't be a certificate error usually if an ssl page had content from two separate ssl sites if one doesn't match the url you went to in the address bar?

 

lets say I went to https://www.americanexpress.com and inside that page there is an image from https://status.webtrends.com/id/image233424.gif?blahblah.

 

 

 

 

Correct. That's what I've seen. If you're still getting a cert warning, can you use a browser plugin, wait for the error message, clear the logs and then click okay on the warning to load the content. You should then see the request which is triggering the error.

 

 

What is the exact error message? What is the request being made to and is it http:// or https://?

 

 

Aaron