Secure Socket Layer (SSL), IIS 7 and ColdFusion

[apocalipsis19]

Hello Community!

Recently we migrated to Windows Server 2008 and IIS 7. After that we have been receiving calls from our customers that once they get to the checkout button they receive a message: "The page cannot be displayed blah blah." After reading the reports from customers service, I detected a pattern in the errors: They all occur on our secure pages.

Before blaming the servers or the users' browser, I want to make sure that I can do on my end, assume responsibility and try to make things better. Have any of you experienced some issues with IIS 7, SSL and coldfusion pages? Does anyone have been on the same situation? Do you have any thoughts to improve my code if the coding is the problem?

Thanks!

Ysais.

[JR__Bob__Dobbs-qSBHQ2]

From what you describe this sounds like it could be an IIS issue, not a ColdFusion issue.

Have you been able to reproduce the error?

Does the error only occur when a specific browser or operating system is used?

Do all users or only some users receive the error?

Have you verified that your SSL certificate is set up correctly?
1. The certificate installed on the new server.
2. Our domain, such as www.example.com, matches the domain that the certificate is assigned to.
3. The certificate is not expired.

4. Is the certificate issuer recognized by the browser as a trusted certificate authority.  If you created your own certificate rather then getting one from a third party such as VeriSign this could be a trust issue between the brower and certificate.

Do you mean pages accessed over SSL when you say "secure pages"?  Does this mean the error only occurs when https is used?

Can you view non-CFML pages over SSL?  Try putting a plain HTML page on your server and invoking it with https.

What is the error message your users receive? What is the "blah blah" part?  It would be helpful to know the HTTP status code.

[apocalipsis19]

Hi JR!

Thank you for your response.

Have you been able to reproduce the error? No, we haven’t reproduced the error. This is driving us nuts since there are 10 developers and 6 designers and none of us can reproduce the problem! It just occurs randomly.

Does the error only occur when a specific browser or operating system is used? All browsers and operating systems but IE counts for the majority of the cases (which is not a surprise for the amount of people that are IE users, it’s a matter of proportions)

Do all users or only some users receive the error? Some users only. It would be easy if it was everybody.

Do you mean pages accessed over SSL when you say "secure pages"? Yes, sir!  Does this mean the error only occurs when https is used? Yes, only https pages.

Can you view non-CFML pages over SSL?  Try putting a plain HTML page on your server and invoking it with https. We created a test page and we can access it alright in both plain HTML and dynamic pages.

What is the error message your users receive? The page cannot be open… What is the "blah blah" part? I will ask the customer service fellows to ask the customers about that.

Thanks!

[mansi36441746neh8]

This can resolve technical problem easily..