Hi,

I tried installing last night into a configuration that looked like
this: 

Subdomained web server location for scripts: 

http://domains.mydomain.com 

SSL web server location for scripts: 

https://www.mydomain.com/domains/ 

My SSL cert is for the site http://www.mydomain.com, and I would like a
subdomained URL for my domain management system called
domains.mydomain.com. 

Anyway, I let the Installer modify the supplied index.html file as well
as the cgi files, then copied them to the directory pointed to by both
URLs above (the same physical directory). 

I start out at the index page http://domains.mydomain.com just fine, and
then the first submit button in a script generally works fine, but the
next submit button - from the https script, is screwed up like this: 

https://www.mydomain.com/domains/domains/order.cgi 

Anyone have any ideas on how to fix this? 

I see where the problem is in the perl code, but I�m not convinced on
how to fix it.

In order.cgi, the problem is here:

    $NO_SSL_CGI = $ENV{SCRIPT_NAME};

        if ($CONFIG{ssl_server}) {
                $CONFIG{ssl_server} =~ s/\/$//;
                $SSL_CGI = $CONFIG{ssl_server} . $ENV{SCRIPT_NAME};
        } else {
                $SSL_CGI = $NO_SSL_CGI;
        }

Where $ENV{SCRIPT_NAME} returns /domains/order.cgi. This is added to my
secure server https://www.mydomain.com and I get the "extra" /domains/
when a secure script calls itself or another secure script. If order.cgi
is called from the insecure side of the house, it's fine of course.

Would I be wrong to strip out everything up to the last "/" in the
returned SCRIPT_NAME variable? I suppose not. It would work for me but
it would break for  anyone who does not keep their script at the top
level...

I'd really like to keep the subdomained URL, but I don't want to buy
another cert for this "server". I suppose I could use mod_rewrite to
redirect these improperly formed URLs back to where they belong, but it
seems like the wrong solution. 

Any other ideas?

Thanks, 

-Tim 

Reply via email to