Friday, December 18, 2009

Security Alert after SSL

With Oracle Application Server 10.1.2.3.0, SSL is enable with the SSO page.
Portal is running on HTTP, while SSO is secured with HTTPS. After clicking on the Login link on the secured SSO login page, the Internet Explorer raises the following Security Alert:
"You are about to be redirected to a connection that is not secure. The information you are sending to the current site might be retransmitted to a nonsecure site. Do you wish to continue?"

This alert is even raised when the following Advanced Internet Option is unchecked:
Warn if changing between secure and not secure mode setting



To implement the solution, please execute the following steps::
Solution 1:
1. Upgrade your Windows XP installations with the Service Pack 2.
2. Make sure that the registry has the following DWORD entry set to 0:
HKEY_LOCAL_MACHINE\SOFTWARE\
Microsoft\Windows\CurrentVersion\InternetSettings\WarnOnHTTPSToHTTPRedirect

See more information in the following Microsoft Support article:
You receive the warning "You are about to be redirected to a connection that is not secure." in Internet Explorer 6 Service Pack 1
at
http://support.microsoft.com/kb/883740/

Solution 2:
1. Obtain from Microsoft Support and install the hotfix of the following Microsoft Support article:
You receive the warning "You are about to be redirected to a connection that is not secure." in Internet Explorer 6 Service Pack 1
at
http://support.microsoft.com/kb/883740/
2. Make sure that the registry has the following DWORD entry set to 1:
HKEY_LOCAL_MACHINE\SOFTWARE\
Microsoft\Internet
Explorer\Main\FeatureControl\
FEATURE_NO_WARN_ON_HTTPS_TO_HTTP_REDIRECT_KB883740\iexplore.exe


You might also be interested in other topics


Popular Posts