tags:

views:

123

answers:

1
Q: 

SWF not loading in ie8 after we switched to SSL

We recently switched our webapp to use SSL at the request of a very large client. We complied and everything went smooth until my IE users started emailing support about not seeing our flash graphs (XML/SWF Charts: www.maani.us/xml_charts/)

In IE8 it prompts that insecure content is being delivered, we fixed this issue by changing the flash plugin links in the embed code to call https, but the swf's just have red X's in the upper left hand corners.

Browsing directly to the swf's has the same effect. Red X's like the content doesn't exist.

I have updated ie8's flash to 10.0.45.2

FF, Chrome, and Safari work just fine. IE7 will load the swf, but won't load the xml to power the graph. These graphs have worked for over two years without issue until the SSL/https switchover we completed over the weekend.

The embed code is here: https://gist.github.com/f425b370de390764bd75 links to screenshots are at the top of the gist.

A: 

This happens because of an issue with IE and headers.

Here are more links to the issue and the solution involves changing the headers you're sending. This is not a fun bug to deal with.

http://www.blog.lessrain.com/flash-loading-and-browser-cache-test-suite/

How to prevent caching in Internet Explorer

Load Method Fails to Load XML Documents over SSL Connection

David Young  2010-08-31 01:17:34
Thanks for the response David. I'll have to check these solutions out in the morning with my architecture engineers (they got me, the frontend guy, involved b/c its 'a flash problem')
ubermajestix  2010-08-31 05:05:43
Ok we removed all Cache-Control headers and it fixed the issue in IE7 and IE8. Specifically in haproxy: rspidel Cache-control.Thanks for pointing us in the right direction!
ubermajestix  2010-09-01 19:08:23
David...I think I love you. In that deep, dark and bromantic sort of way that only a programmer who's been fighting with IE over its clandestine attempts to push me over the edge can.
jerebear  2010-10-15 19:06:49

related questions

Why is access denied when installing SSL cert on IIS 5?
What does a PHP developer need to know about https / secure socket layer connections?
Am I turning away customers by disabling SSL 2.0 and PCT 1.0 in IIS5?
Coding Dojo with IE and SSL
Enforce SSL in code in an ashx handler
How to connect to PostgreSQL from .NET using TLS with both client and server authentication?
HELP SSL GURUs!!! ... Problems with SSL Connection
What's a clean/simple way to ensure the security of a page?
How to specify accepted certificates for Client Authentication in .NET SslStream
SharePoint stream file for preview
Problem with Oracle Application Server SSL Certificates
Is there a limit with the number of SSL connections?
Testing HTTPS files with MAMP
Cheapest SSL certificates
Limiting traffic to SSL version of page only
How do I support SSL Client Certificate authentication?
Why can't I connect to my CAS server with Perl's AuthCAS?
Is there a way to make Firefox ignore invalid ssl-certificates?
How do I create a self signed SSL certificate to use while testing a web app.
Can a proxy server cache SSL GETs? If not, would response body encryption suffice?
HTTPS in IIS 5.1
How do you redirect HTTPS to HTTP?
Debugging: IE6 + SSL + AJAX + post form = 404 error
How do I add SSL to a .net application that uses httplistener - it will *not* be running on IIS
Options for Google Maps over SSL