Re: Cannot download files over SSL in Internet Explorer - where is Cache-Control: no-cache header being set?

[Baljeet Nijjhar <baljeet.nijjhar@xxxxxxxxxxxxxx>]

It *seems* that if I set the values of CachePragmaHeader or CacheControlHeader to blank, the headers are not sent. In addition, if I then delete my cached files in Internet Explorer it is working. I can open Word and PDF files, and I don't have to have the Word or PDF application already open, nor do I have to have BypassSSLNoCacheCheck registry setting set to true.

Now I have to find out exactly what setting to put the headers to, because it may not be the wisest option to drop them.

thanks very much for your help!

On Fri, Mar 5, 2010 at 2:18 PM, Baljeet Nijjhar <baljeet.nijjhar@xxxxxxxxxxxxxx> wrote:

It is very possible! I tried changing our WebGate configuration through Oracle Access Server console by setting CachePragmaHeader and CacheControlHeader to public as described in the link you sent, and the headers being sent on my HTTP response were modified, so it appears that this component is responsible for adding/setting them (and it can't be undone by updating the Apache proxy server configuration e.g. adding 'Header unset Cache-Control' in httpd.conf has no effect).

However, IE still doesn't play ball, so I need to work out either a) what these need to be set for IE/SSL to work or b) work out how to stop WebGate adding them at all (so we can control them through Apache proxy server or our application server).

Will update when I have more time, but thanks so much for that. I had come across this possibiilty before, and had tried modifying a random WebGateStatic.lst but this had no effect and I gave up. So thanks for making me look at it again.

On Fri, Mar 5, 2010 at 11:59 AM, Philip Wigg <phil@xxxxxxxxxxxxxxxx> wrote:

On 5 March 2010 11:28, Baljeet Nijjhar <baljeet.nijjhar@xxxxxxxxxxxxxx> wrote:
> We are connecting directly over a LAN to the Apache proxy server, it is
> airgapped network. I also have WebGate, Oracle AccessServer, Oracle Identity
> Server Oracle Identity and Access Manager Control and Oracle Internet
> Directory 'in the mix'.
>
> On Fri, Mar 5, 2010 at 10:42 AM, Philip Wigg <phil@xxxxxxxxxxxxxxxx> wrote:
>>
>> On 4 March 2010 18:35, Baljeet Nijjhar <baljeet.nijjhar@xxxxxxxxxxxxxx>
>> wrote:
>> > Hi i dont think there is anything in front. There is some communication
>> > with
>> > Oracle WebGate and Oracle Identity and Access Manager but nothing that
>> > obviously sets these headers on the response once it leaves the
>> > application
>> > server.

Not strictly Apache but is it possible that Oracle WebGate doing this?

See http://download.oracle.com/docs/cd/E10761_01/doc/oam.1014/b32420/v2access.htm

--

CachePragmaHeader and CacheControlHeader

These settings apply only to WebGates and control the browser's cache.

By default, CachePragmaHeader and CacheControlHeader are set to
no-cache. This prevents WebGate from caching data at the Web server
application and the user's browser.

However, this may prevent certain operations such as downloading PDF
files or saving report files when the site is protected by a WebGate.

You can set the Access Manager SDK caches that the WebGate uses to
different levels. See
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html section 14.9
for details.

All of the cache-response-directives are allowed. For example, you may
need to set both cache values to public to allow PDF files to be
downloaded.

--

If it's not that, I'm afraid I don't know!

Cheers,
Phil.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx