ASP.NET Ajax and SSL

I have developed the complete site using ASP.NET AJAX v1 and works wonderfully, and was in the testing enviornment for a few days and looked good.

The problem stared when we installed SSL on the server and activated HTTPS for a few pages on our site for the credit card processing. Now i keep getting the below error on the pages that are using HTTPS and NOT for any other page, if i deactivate HTTPS for those pages the pages just work fine and without any javascript errors.

Sys is not defined[Break on this error] Sys.WebForms.PageRequestManager._initialize('ctl00$sm', document.getElementById(...signup.aspx (line 50)

Sys is not defined[Break on this error] Sys.Application.initialize();

(sm is the ScriptManager just for your info)

I have copied the error messages from the Firefox plugin Firebug. Is it some sort of bug or I am doing something wrong here. Please advice as the site is almost complete and has to go live in a few days. I would really appreciate any advice.

Regards

Prashant Atal

Can you post more info or have you sloved this problem?

The issue might be thathttp://yoursite.com andhttps://yoursite.com are considered different "domains" according to the javascript security model, and therefore a script loaded from one domain will not be able to execute inside the other because it doesn't fit the 'same origin' rule (varies by protocol). Seehttp://www.mozilla.org/projects/security/components/same-origin.html for details.

Paul is correct. The port and the domain must be the same, in order for the javascript security model to work. As a personal note, I am not having any problems, so far, with Ajax requests traveling over non-SSL channels when the page request is https/SSL. It would be nice to state that in the AJAX's FAQs. The only way I was able to determine if the requests were using SSL, I need to use Fiddler to see the requests. Also after a number of hours of reading, I'm confident that if the page is using SSL (https), then all the AJAX calls back to the server will also use SSL.