Thread: Infinite Redirect Loop When Going From non-SSL to SSL

Hey all,

I'm trying to get things up and running in a cloud environment.

With the great support of Jon and ASPDNSF support, I have things up and running.

The trouble for me now is that when I click on Add To Cart, Login, or any other cart function, I get a redirect loop error.

I previously thought this was when going from non-SSL to SSL but it also occurs when you are browsing in SSL and then add to cart or try to login.

So I think it's really doing the loop when something active takes place in the storefront (adding something to cart, requesting a login page, etc).

Any ideas on how to fix this?

Thanks.
Philip

I'm solving this exact problem right now. I don't have a timeframe yet for a fix.

The issue is that an SSL channel is used between the shoppers browser and Mosso's load balancer. At that point, the load balancer forwards the request to a specific IIS cluster (via an internal secure network on port 80), with the server variable "HTTP_CLUSTER_HTTPS" set to "on" (a Mosso-specific variable). Outbound response traffic from that IIS cluster hits the load balancer, and travels back out the existing SSL channel to the shopper.

Thanks Jon! If you make any headway I'd love to know.

Thanks very much for your help.
Philip

Quick question guys: do you happen to use Microsoft ISA Firewall?

I've seen this problem before with ISA Server and I have the solution

Maybe you want to PM me in case you're using Microsoft ISA Server. It has nothing to do with AspdotnetStorefront...

fsantos

I don't think I have the ability to PM you on here. Can you post the solution? Is it the one about setting the path to itself? I don't have access to IIS. The host is Mosso.

Thanks!

Hey Jon,

The following code added to AppLogic.cs lets me add product to the cart on Mosso but it does not switch to https: Any ideas?

Code:

String s = "http://" + CommonLogic.ServerVariables("HTTP_HOST") + ScriptLocation;
            if (TryToUseSSL && AppLogic.UseSSL() && AppLogic.OnLiveServer())
            {
                if ((AppLogic.AppConfig("SharedSSLLocation").Length == 0) && (CommonLogic.ServerVariables("HTTP_CLUSTER_HTTPS") == "on"))
                {
                    s = s.Replace("http:/", "https:/");
                    if (AppLogic.RedirectLiveToWWW())
                    {
                        if (s.IndexOf("https://www") == -1)
                        {
                            s = s.Replace("https://", "https://www.");
                        }
                        s = s.Replace("www.www", "www"); // safety check

If I manually switch to https it also works now even if something is in the cart. It's just a matter of switching automatically. Not sure how to proceed.

We'll have support for Mosso in the next release

Awesome! I think that is great. Any timeframe on that release? Or any idea on how to modify the code above to make it work for 8.0? If it's coming out soon, I'll probably back burner this and just use the new build. Thanks for implementing support for them.

New release is being posted (C# and non-source) today. VB will be available probably tomorrow.

Thank you very much!

I am having a very similar problem but I am not using Mosso.

I have enabled forced login for my site using:

<deny users="?"/>

in Web.config. This properly displays the login page when anybody hits the site. However, when a valid login is provided the site confirms login is ok, redirecting, and then I end back at the login page. This becomes an infinite loop.

I noticed this thread and I've found that if I turn off SSL everything works correctly.

Any ideas?

Thanks,
Paul

I'm having this same problem. We just upgraded to ISA Server 2006 and everything works fine except when clicking on the shopping cart or adding to the shopping cart. The page times out with too many server redirects and number of HTTP requests per minute.

It works fine in ISA 2000 though. Any thoughts or update on this problem?

I have a similar problem and I was wondering if a solution had been found.