Re: [cobalt-users] 404 Errors with new 128 bit ssl on Raq 3i

["Michael Zimmermann" <zim@xxxxxxxx>]

From: "David" <dd@xxxxxxxxxxxxxxx>

> Hi Michael,
> Thanks for the tip and instructions too!

Welcome, David,

 

by the way my solution was sort of a quick 'n dirty - just

disabling all the error-documents alltogether.

 

Have you seen the comments by Ken Markus, who pointed

at the real cause of the problem, namely that the images which

are included in the error-documents are fetched from the secure site ?

 

The error-documents which are displayed instead of the error-code

by default reside in

 

    /usr/admserv/html/.cobalt/error

 

and they include images like

 

    <IMG SRC="" ALIGN=LEFT BORDER=0>

 

The image source-path starting with "/.cobalt/..." is then rewritten by Apache

into a SSL-reference to the basic server

 

see the great RewriteRules in /etc/httpd/conf/httpd.conf, like

 

  # These two are for the rewrite options
  s/http/https/go if (/^Rewrite/);
  s/80/443/go if (/^Rewrite/);

... and ...

  if ( ssl_cert_check("/home/sites/home/certs/") =~ /^2/ ) {
    $proto = 'https';
  } else {
    $proto = 'http';
  }

... and ...

    RewriteRule ^/.cobalt/(.+)    proto://servername:81/.cobalt/$1 [L,R]

 

So if you still want to use the error-documents, you can either throw out the images alltogether

(which I tried and it worked fine), or use another image-path, say SRC=""

together with different Rewrite-Rules and/or paths for "/.common/images/..." references

(which I wouldn't rather try on a production machine).

 

 

Best... to you too :-)  Michael