There is a bug concerning SSL and ASP.Net 2.0 Menu Control

Hi all

It appears there is a bug - when using a 2 or more tier menu control in
asp.net in an SSL environment you get prompted with the:

"This page contains both secure and non-secure items blah blah"

a) has anyone else experienced?

b) if so do we know when to expect it to be fixed?

Thanks
KevMantorok wrote:
> Hi all
> It appears there is a bug - when using a 2 or more tier menu control in
> asp.net in an SSL environment you get prompted with the:
> "This page contains both secure and non-secure items blah blah"

Have you looked at the generated HTML to see if there is a mistake that
you made? I haven't used this control in an SSL environment yet so I'm
only speculating.

Good luck,

--
Sean
"Fao, Sean" <enceladus311@.yahoo.comI-WANT-NO-SPAM> wrote in message
news:ubV70OfFGHA.1288@.TK2MSFTNGP09.phx.gbl...
> Mantorok wrote:
>> Hi all
>>
>> It appears there is a bug - when using a 2 or more tier menu control in
>> asp.net in an SSL environment you get prompted with the:
>>
>> "This page contains both secure and non-secure items blah blah"
> Have you looked at the generated HTML to see if there is a mistake that
> you made? I haven't used this control in an SSL environment yet so I'm
> only speculating.

Yep I've checked, I've used relative paths in my links.

Kev
"Mantorok" <mantorok@.mantorok.com> wrote in message
news:dq0h62$nmc$1@.newsfeed.th.ifl.net...

> Yep I've checked, I've used relative paths in my links.

Do any of the links point to resources in non-SSL locations? If so, you will
get the message box by default when you access an SSL page which contains
links to non-SSL resources.
"Mark Rae" <mark@.markN-O-S-P-A-M.co.uk> wrote in message
news:Oub62lfFGHA.1676@.TK2MSFTNGP09.phx.gbl...
> "Mantorok" <mantorok@.mantorok.com> wrote in message
> news:dq0h62$nmc$1@.newsfeed.th.ifl.net...
>> Yep I've checked, I've used relative paths in my links.
> Do any of the links point to resources in non-SSL locations? If so, you
> will get the message box by default when you access an SSL page which
> contains links to non-SSL resources.

Yes there are links in the master page that link back to non-secure sites -
does that really make a difference? Sounds odd if it does.

Kev
"Mantorok" <mantorok@.mantorok.com> wrote in message
news:dq0lgl$q9r$1@.newsfeed.th.ifl.net...

> Yes there are links in the master page that link back to non-secure
> sites -

There's your problem...

> does that really make a difference?

Yes.

> Sounds odd if it does.

Perfectly logical if you think about it...
"Mark Rae" <mark@.markN-O-S-P-A-M.co.uk> wrote in message
news:eGZYZCgFGHA.1676@.TK2MSFTNGP09.phx.gbl...
> "Mantorok" <mantorok@.mantorok.com> wrote in message
> news:dq0lgl$q9r$1@.newsfeed.th.ifl.net...
>> Yes there are links in the master page that link back to non-secure
>> sites -
> There's your problem...
>> does that really make a difference?
> Yes.
>> Sounds odd if it does.
> Perfectly logical if you think about it...

Wait a minute - do you mean hyperlinks or just linking to non-secure stuff,
if you mean the latter then no, but the former - yes.

Kev
most likely you are referencing an image over http. the easiest way to find
the reference is to use firefox, and goto to the media tab on the pageinfo,
you will see the http reference.

-- bruce (sqlwork.com)

"Mantorok" <mantorok@.mantorok.com> wrote in message
news:dq0gjm$nbo$1@.newsfeed.th.ifl.net...
> Hi all
> It appears there is a bug - when using a 2 or more tier menu control in
> asp.net in an SSL environment you get prompted with the:
> "This page contains both secure and non-secure items blah blah"
> a) has anyone else experienced?
> b) if so do we know when to expect it to be fixed?
> Thanks
> Kev
"Mantorok" <mantorok@.mantorok.com> wrote in message
news:dq0nd6$rbg$1@.newsfeed.th.ifl.net...

> Wait a minute - do you mean hyperlinks or just linking to non-secure
> stuff, if you mean the latter then no, but the former - yes.

Either; both; whatever - that's the way it is...
"Mark Rae" <mark@.markN-O-S-P-A-M.co.uk> wrote in message
news:eQVWamnFGHA.3064@.TK2MSFTNGP10.phx.gbl...
> "Mantorok" <mantorok@.mantorok.com> wrote in message
> news:dq0nd6$rbg$1@.newsfeed.th.ifl.net...
>> Wait a minute - do you mean hyperlinks or just linking to non-secure
>> stuff, if you mean the latter then no, but the former - yes.
> Either; both; whatever - that's the way it is...

I don't think so - a hyperlink on a SSL site pointing to HTTP is not classed
as containing a non-secure item.

Firefox doesn't seem to give me this message, only IE...

Kev
"Bruce Barker" <brubar_nospamplease_@.safeco.com> wrote in message
news:ORHYzZiFGHA.2444@.TK2MSFTNGP11.phx.gbl...
> most likely you are referencing an image over http. the easiest way to
> find the reference is to use firefox, and goto to the media tab on the
> pageinfo, you will see the http reference.

Nope - all HTTPS - also, Firefox doesn't give me this shit - only IE
does...

Kev
Hi

Any references to non-SSL pages - including the code which is generated by
the Menu can cause the warning. I've noticed when I create a menu (I'm having
many other issues right now which I'm working through) that the page
generates LOTS of code and references a files in the head from the root
called /WebResource.axd?d=6txiuwerieurieuriu etc.

Also, any sytle sheet references would need considering too.

does this help?

There is a bug concerning SSL and ASP.Net 2.0 Menu Control

Hi all
It appears there is a bug - when using a 2 or more tier menu control in
asp.net in an SSL environment you get prompted with the:
"This page contains both secure and non-secure items blah blah"
a) has anyone else experienced?
b) if so do we know when to expect it to be fixed?
Thanks
KevMantorok wrote:
> Hi all
> It appears there is a bug - when using a 2 or more tier menu control in
> asp.net in an SSL environment you get prompted with the:
> "This page contains both secure and non-secure items blah blah"
Have you looked at the generated HTML to see if there is a mistake that
you made? I haven't used this control in an SSL environment yet so I'm
only speculating.
Good luck,
Sean
"Fao, Sean" <enceladus311@.yahoo.comI-WANT-NO-SPAM> wrote in message
news:ubV70OfFGHA.1288@.TK2MSFTNGP09.phx.gbl...
> Mantorok wrote:
> Have you looked at the generated HTML to see if there is a mistake that
> you made? I haven't used this control in an SSL environment yet so I'm
> only speculating.
Yep I've checked, I've used relative paths in my links.
Kev
"Mantorok" <mantorok@.mantorok.com> wrote in message
news:dq0h62$nmc$1@.newsfeed.th.ifl.net...

> Yep I've checked, I've used relative paths in my links.
Do any of the links point to resources in non-SSL locations? If so, you will
get the message box by default when you access an SSL page which contains
links to non-SSL resources.
"Mark Rae" <mark@.markN-O-S-P-A-M.co.uk> wrote in message
news:Oub62lfFGHA.1676@.TK2MSFTNGP09.phx.gbl...
> "Mantorok" <mantorok@.mantorok.com> wrote in message
> news:dq0h62$nmc$1@.newsfeed.th.ifl.net...
>
> Do any of the links point to resources in non-SSL locations? If so, you
> will get the message box by default when you access an SSL page which
> contains links to non-SSL resources.
Yes there are links in the master page that link back to non-secure sites -
does that really make a difference? Sounds odd if it does.
Kev
"Mantorok" <mantorok@.mantorok.com> wrote in message
news:dq0lgl$q9r$1@.newsfeed.th.ifl.net...

> Yes there are links in the master page that link back to non-secure
> sites -
There's your problem...

> does that really make a difference?
Yes.

> Sounds odd if it does.
Perfectly logical if you think about it...
"Mark Rae" <mark@.markN-O-S-P-A-M.co.uk> wrote in message
news:eGZYZCgFGHA.1676@.TK2MSFTNGP09.phx.gbl...
> "Mantorok" <mantorok@.mantorok.com> wrote in message
> news:dq0lgl$q9r$1@.newsfeed.th.ifl.net...
>
> There's your problem...
>
> Yes.
>
> Perfectly logical if you think about it...
Wait a minute - do you mean hyperlinks or just linking to non-secure stuff,
if you mean the latter then no, but the former - yes.
Kev
most likely you are referencing an image over http. the easiest way to find
the reference is to use firefox, and goto to the media tab on the pageinfo,
you will see the http reference.
-- bruce (sqlwork.com)
"Mantorok" <mantorok@.mantorok.com> wrote in message
news:dq0gjm$nbo$1@.newsfeed.th.ifl.net...
> Hi all
> It appears there is a bug - when using a 2 or more tier menu control in
> asp.net in an SSL environment you get prompted with the:
> "This page contains both secure and non-secure items blah blah"
> a) has anyone else experienced?
> b) if so do we know when to expect it to be fixed?
> Thanks
> Kev
>
"Mantorok" <mantorok@.mantorok.com> wrote in message
news:dq0nd6$rbg$1@.newsfeed.th.ifl.net...

> Wait a minute - do you mean hyperlinks or just linking to non-secure
> stuff, if you mean the latter then no, but the former - yes.
Either; both; whatever - that's the way it is...
"Mark Rae" <mark@.markN-O-S-P-A-M.co.uk> wrote in message
news:eQVWamnFGHA.3064@.TK2MSFTNGP10.phx.gbl...
> "Mantorok" <mantorok@.mantorok.com> wrote in message
> news:dq0nd6$rbg$1@.newsfeed.th.ifl.net...
>
> Either; both; whatever - that's the way it is...
I don't think so - a hyperlink on a SSL site pointing to HTTP is not classed
as containing a non-secure item.
Firefox doesn't seem to give me this message, only IE...
Kev

This may seem like a dumb question ...

What is the best way to move from a development environment to a production environment for an ASP application?

Currently I am simply copying everything from the project subdirectory on the development box to a subdirectory of the same name on the production box. All my development work on the development box is done under x:\inetpub\wwwroot\application so my copy process is to copy everything from DEV:\inetpub\wwwroot\application to PRD:\inetpub\wwwroot\application

Let me give a bit of environment clarification:

I am running IIS on both my development machine and my production machine. I am running Windows 2000 on both. The production machine is accessible from the company intranet, my development machine is not.

The project I am creating has several other projects included (i.e. AppLauncher, SKMMenu, OfficeButton, and my own Security Application interfacing with the AppLauncher).

In all cases I simply copy each of the project's subdirectories onto the production box into subdirectories named the same as on my development box.

I've read a bunch of articles on how to create a deployment project (and I understand the "How"), but am not finding much on WHY.

Thanks in advance for clarifying this.

- MarkThe setup and deployment projects take care of other steps you typically need to do, such as creating a new virtual directory for the application. You can optionally add registry keys and run other setup scripts from the deployment projects.

If you already have the environment setup, it might make sense to stick with the XCOPY deployment model you use. If you find yourself repeating some other tasks during installation, like adding a registry key or putting dlls into the GAC, then a setup project can automate these steps for you.