Learn More





Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...DNN Does Not Properly Support SSL Offloading (read: Bug)DNN Does Not Properly Support SSL Offloading (read: Bug)
New Post
10/15/2014 3:00 PM

Although this is a premium feature that we have paid for it is clear after testing that DNN does not properly support SSL Offloading.  Our top navigation, SiteMap, Search Results, and popus such as page settings all use HTTP URLs even though we have everything configured correctly.

We have determined the root cause to be a bug in DNN, specifically it appears to be within Globals.AddHTTP() -- this method is used throughout the DNN source code and within the Friendly URL provider (which we are using). When using SSL offloading this method DOES NOT check for the SSL header but instead calls the ASP.Net HttpContext.Current.Request.IsSecureConnection property to make the sole determination if a http:// or https:// schema is added to the URL. ASP.Net's IsSecureConnection basically looks at the HTTPS server variable which is not going to be set when using SSL Offloading and as a result all absolute URLs are built as HTTP.

I have been struggling trying to get DNN support to reproduce/test and confirm my findings. Although this is a high priority issue for us, and have have requested this issue get escalated numerous times, our support engineer has refused to escalate nor give our support ticket the proper attention/priority. This has lead me to have to code-walk and test to find this bug myself. 

I would appreciate anyone in the community with more leverage than I (only a paying customer) to see if they can help me lean on DNN to do the right thing and help get this issue the attention it deserves. At this point I am really not sure what we are paying for when it comes to support from DNN. This is our first support case with DNN and have only been using the platform for about two months and so far I am regretting that decision. 


New Post
10/25/2014 1:00 AM
Hey Todd! We're actively looking into the matter. If there is an issue in DNN code, it will be resolved as part of 7.4.0.
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...DNN Does Not Properly Support SSL Offloading (read: Bug)DNN Does Not Properly Support SSL Offloading (read: Bug)

These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
Try Evoq
For Free
Start Free Trial
a Demo
See Evoq Live
Need More Information?