Hi All,

I've found the cause for my problem with IE7 and downloading attachments over HTTPS with RC 0.3.1.

For those of you that are interested (or to create an archive that might help future starters of RC):

It didn't make sense to me since this phenomenon was fixed a long time ago. Until I examined the code in rcube_shared.inc (in function send_nochacheing_headers()) and saw that there was a check for https (function rcube_https_check()), which changes cache control. After looking at rcube_https_check() in main.inc I saw that this function checks the presence of some _SERVER object variables. I've started seeing the IE7 attachment download since we've got RC behind a reverse proxy that does ssl offloading. In effect this meant that there is a https connection in the users browser, but at the server side, there's no HTTPS variable present in the _SERVER object (due to the ssl offloading on the reverse proxy), which causes rcube_https_check() to return false. Which on turn meant that cache control wasn't handled properly for IE7.

I've solved this server side to include SetEnv HTTPS on on the vhost configuration in apache. I believe someone mentioned a similar behaviour on the forums with a previous release of RC with a proxy between RC and its users.

Thanks for a great product,

Br.

Dennis

Op 4 jan 2010, om 16:07 heeft Dennis Ortsen het volgende geschreven:

Hi All,

I remember seeing an issue on the list for a problem with downloading attachments on RC 0.3.1 with IE7 over HTTPS. The problem doesn't occur when using HTTP. Safari and Firefox have no issues. I've searched the list (with and without google) but can't seem to find any matches on RC 0.3.1 and IE7 with attachments over HTTPS.

Can someone please point me to the right direction?

Thanks in advance,

Br,

Dennis

List info: http://lists.roundcube.net/dev/

Op 5 jan 2010, om 08:15 heeft A.L.E.C het volgende geschreven:

Dennis Ortsen wrote:

...

Hi All,

I've found the cause for my problem with IE7 and downloading
attachments over HTTPS with RC 0.3.1. I've solved this server side to include SetEnv HTTPS on on the
vhost configuration in apache.

...and you've got in main.inc.php:

/ some servers (nginx) doesn't provide $_SERVER['HTTPS'] variable, // also this doesn't exists on servers behind the https proxy // Set this option to TRUE to tell Roundcube that you're in SSL mode $rcmail_config['use_https'] = false;

ah, I guessed that this would need a real https with certificates and
so on, which with a reverse proxy setup (dual) would make certificate
management a lot easier. And I could read the manual a bit better next
time...

thanks,

Br.

Dennis

-- Aleksander 'A.L.E.C' Machniak http://alec.pl gg:2275252 LAN Management System Developer http://lms.org.pl Roundcube Webmail Developer http://roundcube.net _______________________________________________ List info: http://lists.roundcube.net/dev/

List info: http://lists.roundcube.net/dev/