Microsoft Knowledge Base Email Alertz

If you use

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 294266 - Last Review: October 16, 2002 - Revision: 1.4

FIX: ServerXMLHTTP Does Not Support Client Certificates or Redirects Between HTTP and HTTPS

This article was previously published under Q294266

On This Page

SYMPTOMS

If you use ServerXMLHTTP to request a page from a server that requires client certificates, the request may not succeed, and you may receive the following error message:
A certificate is required to complete client authentication
Also, if the object makes a request by using one protocol (such as HTTP), and the requested page on the server redirects the output to another page by using a different protocol (such as HTTPS), the call may also fail and you may receive one of the following error messages:
A redirect request will change a non-secure to a secure connection
or
A redirect request will change a secure to a non-secure connection

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

This bug was corrected in Microsoft XML 3.0 Service Pack 1.

For additional information on other fixes included in Microsoft XML 3.0 Service Pack 1, click the article number below to view the article in the Microsoft Knowledge Base:
292935  (http://kbalertz.com/Feedback.aspx?kbNumber=292935/EN-US/ ) INFO: List of Issues Fixed in Microsoft XML 3.0 Service Pack 1
For the latest information and downloads of MSXML, refer to the following MSDN Web site at:
http://msdn.microsoft.com/xml/default.asp (http://msdn.microsoft.com/xml/default.asp)

MORE INFORMATION

Requirement

Server Certificate enabling Secure Socket Layers

Steps to Reproduce Behavior

  1. Paste the following code into a new ASP document, and save the document as Repro.asp in a Web-accessible folder:
    <%@Language=VBScript%>
    <%
    	dim sxhr
    	set sxhr = server.CreateObject("MSXML2.ServerXMLHTTP")
    	sxhr.Open "GET", "https://MyServer/server1.asp"
    	sxhr.Send
    	Response.Write sxhr.responseText
    %>
    					
  2. Change the address of the server to point to your server.
  3. Paste the following code into a new ASP document, and save the document as Server1.asp in the folder that corresponds to the root of the server:
    <%@ Language=VBScript %>
    <% Response.Redirect "http://MyServer/server2.asp" %>
    					
  4. Change the server address to point to your server.
  5. Paste the following code into a third ASP document, and save the document as Server2.asp in the same folder as Server1.asp:
    <%@ Language=VBScript %>
    This is some data...
    					
  6. Browse to Repro.asp. You receive an error message because the HTTPS page (Repro.asp) redirects the output to an HTTP page (Server2.asp).

APPLIES TO
  • Microsoft XML Parser 2.0
  • Microsoft XML Parser 2.5
  • Microsoft XML Parser 2.6
  • Microsoft XML Parser 3.0
Keywords: 
kbbug kbfix kbmsxml300sp1fix kbmsxmlnosweep KB294266
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate