problems with ssl (https) on IE 5.0

[ColdFusionKing]

I have a application running on CF5, Windows NT and IIS. The application has a login screen that authenticates users in LDAP and stores the login details in session variables. The site uses SSL and the cipher strength is 56 bit, this because older browser versions don't support 128 bit encryption.

Right, I'm having problems browsing the site on IE 5.0. I log in to the site and when I click on a link on the home page, I get logged out sometimes immediately and sometimes after few clicks. When I now log back again without closing the browser, it all seems to be fine, I don't get logged out unexpectedly, I can browse the site without any problems.

I don't see any this happenning on IE 6.0. I can log in and browse the site without my session dying out.

Does anybody know why this happenns on IE 5.0. I can't find a solution to this problem and can't find any help anywhere. Is this a ColdFusion bug? If so is there a patch?

Cheers
Diane

 

[pcorreia]

Have you verified that the problem is with the SSL? If you disable the SSL and try it with IE5.0, does the problem go away?

-pcorreia

 

[csteinhilber]

Your links don't happen to hop back and forth between HTTPS and HTTP, do they?

ColdFusion considers

http://www.mydomain.com/mypage.cfm

to be a different domain/server than

https://www.mydomain.com/mypage.cfm,

and thus, session variables set on one would not be available on the other.

Just a thought.
Hope it helps,
-Carl

 

[ColdFusionKing]

Hi guys,

I have exactly the same site running on http and I don't have this forced logout problem on that site. I have added a little code in the application.cfm file from which I can know what server I am on by viewing the source. As you know the site is secure with a ssl certificate. The site is hosted on 3 webservers, all having the same configuration, all behind a switch and a load balancer. I have found that the session is not maintaining stickiness, or in simple words I keep switching between servers and get logged out every time. For example say I'm on the home page and view the source, I'm on webserver 1, now if I continously refresh the page or hit other pages, I get logged out and when I now view the source, I'm on another webserver.

This does not happenn on the http site, I don't why the webserver kicks me out so often, please help if you have any ideas

Regards
Tom