CSS SSL renewal problem
While renewing the ssl certification in CSS everything went fine while installation but after that when i checked with the following command
sh ssl associate rsakey | grep url(dont want to mention name)
i can see the previous as well as the new both key as associated and says yes
while the new should show yes and old should be no
same it is showing for cert
can anyone help me to sort out with this problem what it can be
Thanks in advance
Sagar,
Have you performed the "no ssl associate rsakey" and the "no ssl associate cert"?
After that, perform the "clear ssl file " and "clear ssl file rsakey "
HTH
Dave
Similar Messages
-
CSS/SSL termination - cypher negotiation Q
Hi everyone
question regarding SSL termination on CSS/SSL module.
I have several several cyphers in my ssl-proxy list,
What is the algorithm to choose the cypher ?
I may assume that CSS and browser negotiate it during SSL session establishing.
The testing shows that same browser gets different cyphers when it hits
different CSSs (cyphers are in the same order in proxy-lists on CSSs)
Thanks
AlexAlex,
it's not really an algorithm.
The browser selects the first cipher that matches its requirements in the list presented by the server/CSS.
The CSS builds a list in the order of weight.
If you did not specify any weight, the list can be random depending in which order you entered the command.
I would say, if you want a specific cipher to be selected, use a highest weight for this cipher.
Gilles. -
How many CSS SSL certificates needed?
From reading the CSS SSL Configuration Guide, it seems that one certificate is needed for each virtual SSL server (or VIP), regardless of how many servers are being load-balanced behind that VIP, but that is not made very clear. Also, it appears that a separate certificate is required for each virtual SSL server. Can someone please confirm or correct this for me? Thank You.
A quick (I hope) follow-up question on this...
Given multiple domain names being load-balanced by a CSS with a single SSL module, would I need different key and cert associations? I am thinking of something like this:
ssl associate rsakey prodkey prodkey.pem
ssl associate cert prodcert prodcert.pem
ssl associate dhparam proddh proddh.pem
ssl associate rsakey intkey intkey.pem
ssl associate cert intcert intcert.pem
ssl associate dhparam intdh intdh.pem -
CSS SSL and link modification problem
Hi all
We have a problem using our CSS to offload SSL for a site. The offload works for the first connection, but the web application seems to be rewriting relative links as absolute links.
For example, a user hits the site at https://www.mydomain.com. The CSS is configured to terminate the SSL traffic, and then send HTTP to the internal web server on TCP/81.
What we're seeing in the client's browser is that all links are being returned as http://www.mydomain.com:81/... instead of https://www.mydomain.com/...
Any idea of how we can do this without messing around with the web server too much? I.e. is there a way on the CSS to do link translation?
ThanksIf the link are indeed hardcoded like this, there is nothing the CSS can do.
Bad server design.
If the server is returning a redirect to http://... the CSS can intercept it and rewrite it to https.
Please verify if there is a redirect.
Gilles. -
We recently started suffering an issue with our CSS11501S-K9 units not performing URL stickiness on our SSL wrapped L5 rules. I've spent dozens of manhours working on the problem, and have quite a bit of information to report, including a solution. There is a high probability that anybody who uses SSL to an L5 rule on a CSS unit will become affected by this problem over the next few weeks/months as users update their browsers with new SSL patches.
We hadn't made any changes to our config in months, and eliminated hardware problems by testing a second unit.
Here are the exact symptoms we saw:
Browsers affected: Firefox 10, Chrome, IE9, others (and some earlier versions of IE depending on patch levels)
Browsers not affected: FireFox 3.5, w3m 0.5.2, curl7.19.7
Impact 1: For SSL Rules backed by L5 rules, the initial response to the first request would be 3 seconds. Further requests on the same TCP connection would not be delayed
Impact 2: L5 rules being accessed via SSL would nolonger perform any URL based stickiness. Accessing the same rule skipping SSL, would work fine
I focused on the 3 second delay, since that was a new issue and was easier to debug than monitoring multiple servers to see if stickiness was broken. This is what I found when a client tries to connect to an SSL rule that ultimately is routed to a L5 HTTP rule:
1. Client/CSS perform initial TLS handshake, crypto cyphers determined (nearly instantly)
2. Client sends HTTP 1.1 request for resource (nearly instantly)
3. 3 seconds of no traffic in our out of the CSS related to this request
4. CSS opens an HTTP connection to backend webserver, backend webserver responds (nearly instantly)
5. The CSS seems to route to the backend server using the balance method (round-robin) instead of the advanced-balance method (url)
6. Response is sent to the client with the resource (nearly instantly)
7. Future requests sent from the browser on the same TCP connection have no delay, but the advanced-balance continues to be ignored
The 3 seconds is quite an exact figure (within a few milliseconds) and appears to be entirely happening inside of the CSS unit itself, since it does not connect to the backend server until after the 3 seconds elapse. 3 seconds smelled like some sort of internal timeout set in the CSS unit after it gives up waiting for something.
Looking at the packets from affected browsers I discovered that the GET /foobar HTTP/1.1 request was being broken into two separate TLSv1 application messages, the first was 24 bytes and the second was 400 bytes. Decrypting these messages I found the first message was a
G
and the second message was:
ET /foobar HTTP/1.1
This essentially splits the initial request the client is sending into two pieces. This confuses wireshark so much, it doesn't decode this as a HTTP request, and just decodes it as "continuation or non-HTTP traffic".
On the working browsers I saw only one TLSv1 application message, decrypting it I saw:
GET /foobar HTTP/1.1
(obviously I'm simplifying the contents of the request, there were lots of headers and stuff)
I am aware that the CSS can't handle L5 rules appropriately if they get fragmented, so I suspected this was the problem. I pulled a packet trace from a few years ago, and at that time confirmed we never saw a double TLSv1 application messages before.
A number of openssl vulnerabilities were recently fixed: http://www.ubuntu.com/usn/usn-1357-1
and browsers may have been recently updated to fix some of these issues, changing the way they encode their traffic.
Solution:
Our ssl config looked something like this:
ssl-proxy-list SSL_ACCEL
ssl-server 10 vip address XX.XX.XX.XX
ssl-server 10 rsakey XXXX
ssl-server 10 cipher rsa-with-3des-ede-cbc-sha XX.XX.XX.XX 80
ssl-server 10 cipher rsa-with-rc4-128-sha XX.XX.XX.XX 80
ssl-server 10 cipher rsa-with-rc4-128-md5 XX.XX.XX.XX 80
ssl-server 10 unclean-shutdown
ssl-server 10 rsacert XXXXXX
Removing:
ssl-server 10 cipher rsa-with-3des-ede-cbc-sha XX.XX.XX.XX 80
Solves the problem. After that's removed, the browsers will nolonger fragment the first character of their request into a separate TLSv1 message. The 3 second delay goes away, and L5 stickiness is fixed. The "CBC" in the cyper refers to Cypher-Block-Chaining (a great article here:
http://en.wikipedia.org/wiki/Cipher-block_chaining), and breaking the payload into multiple packages may have been an attempt to initialize the IV for encryption -- although I'm really just guessing, I stopped researching once I verified this solution was acceptable.
This issue became serious enough for us to notice first on Monday Feb 13th 2012. We believe a number of our large customers distributed workstation updates over the weekend. The customers affected were using IE7, although my personal IE7 test workstation did not appear to be affected. It's quite possible our customers were going through an SSL proxy. I suspect as more people upgrade their browsers, this will become a more serious issue for CSS users, and I hope this saves somebody a huge headache and problems with their production environment.
-JoeHi Joe,
That's a very good analysis you did.
As you already suspected, the issue comes from the TLS record fragmentation feature that was introduced in the latest browser versions to overcome a SSL vulnerability (http://www.kb.cert.org/vuls/id/864643). Unfortunately, similar issues are happening with multiple products.
For CSS, the bug tracking this issue is CSCtx68270. The development team is actively working on a fix for it, which should be available (in an interim software release, so to get it you wil have to go through TAC) in the next couple of weeks
In the meantime, as workaround, you can configure the CSS to use only RC4 cyphers (which is what you were suggesting also). These are not affected by the vulnerability, so, browsers don't apply the record fragmentation when they are in use. This workaround has been tested by several customers already, and the results seem to be very positive.
Regards
Daniel -
CSS + SSL - unable to create RSA association
Hello,
I am having troubles creating an RSA association on our CSS11506.
Here are the steps I've tried:
1.) I take the original "Digital ID Class 3 - VeriSign Server OnSite" certificate provided to us and move to the CSS via FTP. I have used the openssl verify process to make sure it was a good cert.
CSS-EC1# copy ssl ftp FTPSRV import websrv-gr.pem PEM "thepassword"
Connecting (/)
Completed successfully.
(also at this step - I have tried this with and without a passphrase with the same results)
OpenSSL verify:
C:\OpenSSL\bin>openssl verify -verbose -CAfile .\PEM\verisign.pem websrv-gr.pem
websrv-gr.pem: OK
2.) I then create a certificate association:
CSS-EC1(config)# ssl associate cert WWW websrv-gr.pem
3.) I then attempt to create and RSA association:
CSS-EC1(config)# ssl associate rsakey WWW-RSA websrv-gr.pem
%% File does not contain an RSA key
What can I do to get rid of this error? Does the certificate we recieved from Verisign need to be chained with the Verisign Intermediate certificate?
Any ideas?
Thanks in advance...
Regards,
BenHi
we have a customer with a similar problem,
CSS11501(config)# ssl associate rsakey vimageprivkey privkeyvimages.pem
Error: %% File does not contain an RSA key
The openssl utility has been used to extract the rsakey from the PKCS12 file.
They have used this method numerous times before without this error.
RSA key below:-
Bag Attributes
localKeyID: 31 31 36 33 30 38 34 35 35 32 32 33 30
friendlyName: vimages 2006 certificate
Key Attributes:
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,4B31C6E8188C1E2C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-----END RSA PRIVATE KEY-----
Any Ideas ?? -
"Mail could not be recieved at this time" since SSL renewal.
Hi
Recently we had to renew an expired SSL certificate on our Exchange 2010 SP 1 RU 5, once we did this all of our Mac Outlook clients are coming up with the error " The server for account <var>Account_Name</var>
returned the error "Logon failure: Unknown user name or bad password. Your username/password or security settings may be incorrect. Would you like to try re-entering your password"' in Outlook for Mac 2011.
We have tried to renew the certificate but it is still not working. The certificate has been renewed on the Exchange server, and Windows PC’s with Outlook are connected fine, however the Mac clients with Outlook for Mac receive the
error message.
We are able to access mail via OWA and Mac Mail without any issues on the Macs.
Other posts have suggested recreating the ‘EWS’ virtual directory on Exchange, however we are reluctant to do this as the Macs can authenticate successfully when browsing to
the URL http //ExchangeCASServer/EWS/Exchange.asmx.
We have not yet changed the SMTP port as this has never affected anyone until now, also we have tested the Outlook client for Mac that has didn't have the previous certificate on it and it logs in without the error message.
Many thanks.Hi,
According to your description, you cannot login Outlook for MAC while OWA and Outlook for windows can work well. If I misunderstand your meaning, please feel free to let me know.
If yes, I recommend you check the result of recreating the profile.
And we can also try to use Outlook for windows to login the account used for Outlook for MAC.
If it works well, I recommend you ask for more professional help on the following Office for MAC support:
http://www.microsoft.com/mac/support
Thanks,
Angela Shi
TechNet Community Support -
FTP/SSL Connection Problem for FTP Receiver Adapter
Hello All,
We are trying to establish an FTPS/SSL connection with one of our customers from our XI(Unix) system, and are receive following error:
<b>iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier</b>
Communication Channel Parameters:
Connection Security: FTP (FTP Using SSL/TLS) for Control Connection or FTP (FTP Using SSL/TLS) for Control Connection and Data Connection
Command Order: AUTH TLS, USER, PASS, PBSZ, PROT
Checkbox - Use X.509 Certificate.... checked (Certificate was provided by third party (customer issued) and uploaded to service_ssl certificate store on J2EE server)
Data Connection: Passive
Port: 10021
Keystore: service_ssl
X.509 Certificate & Private Key: ssl-credentials
Note: Initial handshaking occurs but connection is being dropped by the third party FTP Server when SSL certificate credentials are being validated. We also tried connecting to the third party FTPS server using standard FTPS client(FileZilla software), this connection gets established successfully with no certificate issues which means certificate and third party FTP Server is functioning correctly.
We therefore are thinking that the problem lies with our XI system being unable to load the certificate information correctly at the point when FTPS session is being established.
Your help and suggestions will be greatly appreciated.
Thanks and Best Regards
Prashant RajaniHello All,
Further in order to test connection set up and communication channel configuration we tried simulating the FTP connection locally by configuring FTP Server using FileZilla at a local machine and accessed it from Client's XI Server.
This set up simulates the problem we encounter with our customer's FTP Server.
If connection security parameter in communication channel for Sender FTP Adapter is set to <b>"FTPs( FTP Using SSL/TLS) with Control Connection" only</b>, file gets successfully created with data at the FTP server but as soon as we switch the connection security parameter to <b>"FTPs( FTP Using SSL/TLS) with Control and Data Connection"</b>, we receive error "Certificate rejected by Chain Verifier". The initial handshaking happens successfully and file gets created at the FTP Server but its empty, connection fails when attempt is made to write data into file and we end up with said error thereby closing the connection.
This is what the FTP (FileZilla) sees when the XI system attempts to set-up a fully encrypted data (FTPS) connection i.e., connection security parameter value as<b>"FTPs( FTP Using SSL/TLS) with Control and Data Connection"</b> :-
- (not logged in) (10.18.106.34)> Connected, sending welcome message...
- (not logged in) (10.18.106.34)> 220-FileZilla Server version 0.9.18 beta
- (not logged in) (10.18.106.34)> 220-written by Tim Kosse ([email protected])
- (not logged in) (10.18.106.34)> 220 Please visit http://sourceforge.net/projects/filezilla/
- (not logged in) (10.18.106.34)> AUTH TLS
- (not logged in) (10.18.106.34)> 234 Using authentication type TLS
- (not logged in) (10.18.106.34)> SSL connection established
- (not logged in) (10.18.106.34)> USER test
- (not logged in) (10.18.106.34)> 331 Password required for test
- (not logged in) (10.18.106.34)> PASS ***********
- test (10.18.106.34)> 230 Logged on
- test (10.18.106.34)> PBSZ 0
- test (10.18.106.34)> 200 PBSZ=0
- test (10.18.106.34)> PROT P
- test (10.18.106.34)> 200 Protection level set to P
- test (10.18.106.34)> SYST
- test (10.18.106.34)> 215 UNIX emulated by FileZilla
- test (10.18.106.34)> PWD
- test (10.18.106.34)> 257 "/" is current directory.
- test (10.18.106.34)> CWD /payment/
- test (10.18.106.34)> <b>250 CWD successful. "/payment" is current directory.</b>- test (10.18.106.34)> TYPE I
- test (10.18.106.34)> 200 Type set to I
- test (10.18.106.34)> PASV
- test (10.18.106.34)> <b>227 Entering Passive Mode (10,27,7,103,15,63)</b>- test (10.18.106.34)> STOR BHPDSB20060911-153840-834.txt
- test (10.18.106.34)> <b>150 Connection accepted</b>
- test (10.18.106.34)> <b>Data connection SSL warning: SSL3 alert read: fatal: bad certificate</b>
- test (10.18.106.34)> <b>Data connection SSL warning: SSL_accept: failed in SSLv3 read client certificate A</b>- test (10.18.106.34)> <b>Data connection SSL warning: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate</b>- test (10.18.106.34)> <b>Data connection SSL warning: error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure</b>- test (10.18.106.34)> <b>426 Connection closed; transfer aborted.</b>- test (10.18.106.34)> QUIT
- test (10.18.106.34)> 221 Goodbye
- test (10.18.106.34)> SSL connection established
Please suggest your valuable inputs if we are missing out something. Any helpful inputs in this regard is highly appreciated.
Thanks and Best Regards
Prashant -
CSS SSL Proxy - how can I write the original source address in http header
I'm replacing some BigIP's with CSS11500's that are configured to do front/backend ssl proxying in a one-armed configuration. The BigIP's write the original source IP address as a http header value when the traffic is sent to the application, and the application uses the IP to match against an application ACL. How can I do the same in the CSS.
thanks,
Brianhere is what you can insert with the SSL module :
http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_configuration_guide_chapter09186a0080292a76.html#wp1027619
Gilles. -
Hi,
I'm building a website from a photoshop design and I have a
problem with the layout I can't see how to fix:
I have a header and a footer which both need to stay centered
and expand to whatever the browser window width is set to.
Between them I have a div of the main content of the pages
which also needs to be centered.
All seems very simple. I would normally just have a big div
around the whole page with an align="center". Job done.
But the problem is the space to the left of the content div
needs to be grey and the space on the right needs to be black.
Therefore I assume I'm going to need 3 divs. 2 for the left and
right spaces and another with the main content between them.
Both the side divs will need to expand somehow to fill the
space while keeping the fixed width content div centered. But I
think they will also have to be floated to sit side by side.
I cant seem to get the divs to stay in the correct places or
keep the side ones filling the space between the content div and
the edges of the browser.
Can anyone help?
Thanks,
OlliebearIs this what you au trying to do?
http://starttoweb.com/
If so, you are welcome to grab the CSS file and mostly to fit
your needs.
Cheryl D Wise
Adobe Community Expert
http://starttoweb.com
"Olliebare" <[email protected]> wrote in
message
news:fpn0q2$p1v$[email protected]..
> Hi,
>
> I'm building a website from a photoshop design and I
have a problem with
> the
> layout I can't see how to fix:
>
> I have a header and a footer which both need to stay
centered and expand
> to
> whatever the browser window width is set to.
>
> Between them I have a div of the main content of the
pages which also
> needs to
> be centered.
>
> All seems very simple. I would normally just have a big
div around the
> whole
> page with an align="center". Job done.
> But the problem is the space to the left of the content
div needs to be
> grey
> and the space on the right needs to be black. Therefore
I assume I'm going
> to
> need 3 divs. 2 for the left and right spaces and another
with the main
> content
> between them.
>
> Both the side divs will need to expand somehow to fill
the space while
> keeping
> the fixed width content div centered. But I think they
will also have to
> be
> floated to sit side by side.
>
> I cant seem to get the divs to stay in the correct
places or keep the side
> ones filling the space between the content div and the
edges of the
> browser.
>
> Can anyone help?
>
> Thanks,
>
> Olliebear
> -
SSL reading problem in server-side
Hi guys,
I have a problem in my server implemetation with SSL Server Socket. I have created a server socket with a specfic port and bind address. Whenever a client connecfed, i grap its inputstream and starts to read as bytes. There is no problem to open server socket and certifacate authorization, and also a client successfully connects to server. But when client writes some data to its connected socket, server cannot read anything. Server throws no exception and there is no problem in writing. But the available bytes in inputstream is always 0. When i replace SSL socket with normal socket, everything is ok, server can read everything. I confused very much. since i have no concrete exception and stack trace, I know it is hard to explain and get help about my problem. I have added some parts from my code.
Could you make any suggestions?
Listening and connection part
ServerSocketFactory socketFactory = SSLServerSocketFactory.getDefault();
socket = socketFactory.createServerSocket(port,backLog,bindAddress);
Socket clientSocket = socket.accept();
in = new BufferedInputStream(clientSocket .getInputStream());Reading part
while (continueRunning){
try {
Thread.sleep(1);
if(in.available()<1){
System.err.println(in.available());
continue;
MessageDecoder decoder= new MessageDecoder();
Message msg = decoder.decode(in);
if(msg == null){
System.out.println("Decoded message is null");
continue;
handler.messageReceived(msg);
} catch (IOException e) {
e.printStackTrace();
continueRunning=false;
try {
clientSocket.close();
} catch (IOException e1) {
e1.printStackTrace();
} catch (InterruptedException e) {
continueRunning=false;
e.printStackTrace();
try {
clientSocket.close();
} catch (IOException e1) {
// TODO Auto-generated catch block
e1.printStackTrace();
}I process bytes whenever they are available in the
stream, thus i use available() for checking wheter
there is any bytes to decode.You are looping and sleeping and calling available(). What's the point? As you have nothing else to do in the loop except sleep according to the above code, the whole sleep/available business is still a waste of time. Why not just read()? You are also burning a lot of CPU cycles for nothing.
The problem is there is no data in the stream althogh client seems write some data. The problem is that regardless of whether there is data in the stream or not, SSLSocket.getInputStream().available() always returns zero. It always does this, and so you cannot use it for the purpose you intend.
This is no loss, as the purpose you intend adds no value to just doing a read(). Try it and see.
I discover the debugging utilities of JSSE and make
some debugs. I find that client is blocked on its
socket when it tries to write stream. I am not using
nio, so my sockets are blocking but i cannot find any
reasonable explanation for this SSL write blocking on
socket.The 'reasonable explanation' is that the peer is never reading, so its socket receive buffer is full, so the writer's send buffer eventually fills too, at which point the writer is blocked.
When i change my implementation and used
non-SSL socket, everything is ok and there is no
blocking.That's because Socket.getInputStream().available() returns positive numbers whereas SSLSocket.getInputStream.available() always returns zero.
Is there anyone who knows something about some kind
of SSL blocking?There is. -
I cant figure out why the valign isnt working on my page..
http://www.v4.skiingbc.info/pages/skiarea2.php?Name=Test1212&TrailMaps=X&FS=√&LP=√
CSS Sheet:
http://v4.skiingbc.info/v4.css
I want all text to be middle aligned in the table cells... If
someone could take a look at the code that would be really
appreciated..
In Dreamweaver the text is middle aligned, it just doesnt
work in IE7You have this on the page:
<td height="79"
<valign="top">
try changing it to thos:
<td height="79" valign="top">
you also have this:
<option selected="selected">Select Card
Type</option>
option selected>Search By Card Type
</option>
make it like this:
<option selected="selected">Select Card
Type</option>
Ken Ford
Adobe Community Expert
Fordwebs, LLC
http://www.fordwebs.com
"Monica101" <[email protected]> wrote in
message news:f0foos$n7u$[email protected]..
> I've got text in a table that won't align at the top:
>
> <td height="79"valign="top"><table width="150"
border="0" cellpadding="0"
> cellspacing="0" class="Side_Links">
>
> It looks fine in Dreamweaver, but displays verticaly in
the center of the
> table. I've been working in Dreamweaver for years and
never had this problem. I
> tried fixing it w/ css:
>
> vertical-align: top;
>
> This didn't work either.
>
> Page:
>
>
http://www.capitalinternet.com/~mycredit/template.php
>
> Thanks!
>
> -
Hello
I have been recently working on a web project. In the project I have a css file Thats suppose to position the logo image.
This is the css code:
/** LOGO */
#logo {
width: 830px;
height: 90px;
margin: 0 auto;
margin-top: 10px;
margin-left: 200px;
background: url(images/img04.jpg) no-repeat left top;
Margin-top moves the logo down and margin-left moves the logo in alignment. The problem is that when I view the
page on different screen sizes margin-left makes the logo image automatically move to the middle of the page.
Instead of staying in the required position.
Can any one help.
Thanks.Hi Thanks so much for the reply.
I want to add more information.
This is the css:
body {
margin: 0;
padding: 0;
background: url(images/img01.jpg) repeat-x left top;
font-family: Arial, Helvetica, sans-serif;
font-size: 12px;
color: #66665E;
h1, h2, h3 {
margin: 0;
text-transform: uppercase;
font-family: "Trebuchet MS", Georgia, "Times New Roman", Times, serif;
font-weight: normal;
color: #0C95C9;
h1 { font-size: 44px; }
h2 { font-size: 18px; }
h3 { }
p, ul, ol {
margin-top: 0;
line-height: 240%;
text-align: justify;
ul, ol { }
blockquote { }
a { color: #0C95C9; }
a:hover { text-decoration: none; }
a img {
border: none;
img.left {
float: left;
margin: 7px 30px 0 0;
img.right {
float: right;
margin: 7px 0 0 30px;
hr { display: none; }
.list1 {
.list1 li {
float: left;
line-height: normal;
.list1 li img {
margin: 0 30px 30px 0;
.list1 li.alt img {
margin-right: 0;
#wrapper {
/* Header */
#header-wrapper {
#header {
width: 920px;
height: 45px;
margin: 0 auto;
/* Menu */
#menu {
float: left;
width: 640px;
height: 45px;
#menu ul {
margin: 0;
padding: 10px 0px 0px 5px;
list-style: none;
line-height: normal;
#menu li {
display: block;
float: left;
#menu a {
display: block;
float: left;
margin-right: 3px;
padding: 3px 25px 2px 25px;
text-decoration: none;
text-transform: capitalize;
font-family: Arial, Helvetica, sans-serif;
font-size: 12px;
color: #FFFFFF;
#menu a:hover { text-decoration: underline; }
#menu .current_page_item a {
height: 20px;
background: #FEC200 url(images/img02.jpg) repeat-x left top;
color: #FFFFFF;
#menu .first {
background: none;
/* Search */
#search {
float: right;
width: 250px;
height: 45px;
#search form {
float: right;
margin: 0;
padding: 12px 30px 0 0;
#search fieldset {
margin: 0;
padding: 0;
border: none;
#search input {
float: left;
font: 12px Georgia, "Times New Roman", Times, serif;
border: none;
#search-text {
width: 135px;
height: 18px;
padding: 3px 0 0 5px;
border: 1px solid #333333;
background: #ECF9E4;
color: #000000;
#search-submit {
height: 25px;
margin-left: 10px;
padding: 1px 10px;
background: #C0C0C0 url(images/bg_grey.jpg);
color: #000000;
/* Page */
#page {
width: 920px;
margin: 0 auto;
#page-bgtop {
padding-top: 30px;
/** LOGO */
#logo {
width: 920px;
height: 90px;
margin: 0 auto;
background: url(images/img04.jpg) no-repeat left top;
#logo h1, #logo p {
margin: 0px;
line-height: normal;
text-transform: lowercase;
font-weight: normal;
color: #FFFFFF;
#logo p {
text-transform: lowercase;
font-size: 10px;
#logo h1 {
padding-top: 54px;
font-size: 34px;
#logo a {
text-decoration: none;
color: #FFFFFF;
/* Content */
#content {
float: center;
width: 920px;
height: 800px;
padding-top: 0px;
padding-right: 0px;
/* Post */
.post {
background: url(images/img07.jpg) repeat-x left bottom;
margin-bottom: 25px;
.post .title {
height: 30px;
color: #549900;
.post .title a {
text-decoration: none;
color: #585D60;
.post .date {
.post .meta {
margin-top: -10px;
padding: 2px 30px 2px 16px;
background: url(images/img03.gif) no-repeat left 8px;
font-family: Arial, Helvetica, sans-serif;
font-weight: normal;
font-size: 10px;
color: #66665E;
.post .meta span {
display: block;
margin-top: -10px;
.post .meta a { }
.post .entry {
padding: 10px 0;
.post .links {
margin: 0 250px 0 0;
padding: 0 0 0 0px;
.post .links .comments {
.post .links .permalink {
padding-left: 17px;
/* Sidebar */
#sidebar {
float: left;
width: 177px;
padding-left: 22px;
font-family: Arial, Helvetica, sans-serif;
font-size: 11px;
color: #585D60;
#sidebar ul {
margin: 0;
padding: 0;
list-style: none;
line-height: normal;
#sidebar li {
margin-bottom: 30px;
padding: 0 0 10px 0px;
#sidebar li ul {
#sidebar li li {
margin: 0;
padding: 7px 10px 10px 7px;
background: url(images/img07.jpg) repeat-x left bottom;
#sidebar p {
margin: 0;
padding: 0px 10px;
#sidebar h2 {
height: 26px;
margin: 0 0 10px 0px;
padding: 12px 0 2px 7px;
text-transform: capitalize;
font-size: 18px;
font-weight: normal;
color: #464F54;
#sidebar p {
line-height: 200%;
#sidebar a {
text-align: left;
text-decoration: none;
font-weight: normal;
color: #585D60;
/* Calendar */
#calendar {
#calendar caption {
padding-bottom: 5px;
font-weight: bold;
#calendar table {
width: 100%;
border-collapse: collapse;
border-bottom: 1px solid #24130F;
border-left: 1px solid #24130F;
border-right: 1px solid #24130F;
#calendar thead th {
padding: 5px 0;
text-align: center;
border-top: 1px solid #24130F;
border-left: 1px solid #24130F;
background: #24130F;
#calendar tbody td {
padding: 5px 0;
text-align: center;
border-top: 1px solid #24130F;
border-left: 1px solid #24130F;
border-bottom: 1px solid #24130F;
#calendar tfoot td {
padding: 5px;
border-left: 1px solid #24130F;
border-bottom: 1px solid #24130F;
#calendar tfoot #next {
border-top: 1px solid #24130F;
text-align: right;
#calendar tfoot #prev {
border-top: 1px solid #24130F;
#calendar .pad {
border-bottom: 1px solid #24130F;
#calendar #today {
background: #24130F;
/* Footer */
#footer {
width: 920px;
height: 49px;
margin: 0 auto;
padding-top: 50px;
#footer-bgcontent {
margin: 0px;
padding: 0px;
height: 99px;
background: #394144;
#footer p {
margin: 0;
text-align: center;
line-height: normal;
text-transform: uppercase;
font-size: 10px;
color: #FFFFFF;
#footer a {
color: #E5FFC4;
This is the Mainpage:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<title>Uimodo</title>
<meta name="keywords" content="" />
<meta name="description" content="" />
<link href="../style/style.css" rel="stylesheet" type="text/css" media="screen" />
<script type="text/javascript" src="jquery/jquery-1.4.3.min.js"></script>
</head>
<body>
<div id="wrapper">
<div id="logo">
</div>
<hr />
<!-- end #logo -->
<div id="header">
<div id="menu">
<ul>
<li><a href="Vidmin.php" class="first">Home</a></li>
<li><a href="Other.php">Other</a></li>
</ul>
</div>
<!-- end #menu -->
<div id="search">
<form method="get" action="">
<fieldset>
<input type="button" id="search-submit" onclick="window.location.href='now.php'" value="UPLOAD NOW" />
</fieldset>
</form>
</div>
<!-- end #search -->
</div>
<!-- end #header -->
<!-- end #header-wrapper -->
<div id="page">
<div id="page-bgtop">
<div id="content">
<table width="920" border="0" align="center" cellpadding="4">
<tr>
<td height="42" valign="top"><table width="415" height="41" align="right">
<tr>
<td width="215" height="35" align="center"> </td>
<td width="60" align="center"><a href="" target="_blank"><img src="../Logo/fblogo.png" alt="" width="34" height="33" /></a></td>
<td width="124"><a href="" target="_blank"><img src="../Logo/twitlogo.png" alt="" width="34" height="33" /></a></td>
</tr>
</table></td>
</tr>
<tr>
<td height="72" valign="top" align="center"><table width="859" height="72" border="0">
<tr>
<td width="293" height="49"><div align="center"><font size="5" color="#333333">Signup</font></div></td>
<td width="14"> </td>
<td width="296"><div align="center"><font size="5" color="#333333">Login</font></div></td>
</tr>
<tr>
<td height="17"><div align="center" id="register"></div></td>
<td> </td>
<td><div align="center" id="loginstatus"></div></td>
</tr>
</table></td>
</tr>
<tr>
<td height="269" valign="top" align="center"><table width="908" height="291" border="0" align="center" cellpadding="3" bgcolor="#CCCCCC">
<tr>
<td width="401" height="287" align="center" valign="top"><form id="register_form" method="post" action="">
<table width="300" height="291" >
<tr>
<td height="23" colspan="2"> </td>
</tr>
<tr>
<td width="85" height="36"><div align="right"><font color="#333333" size="3" face="Arial, Helvetica, sans-serif">Username :</font> <br />
</div></td>
<td width="203"><input name="realname" id="realname" type="text" size="30" value='<?Php echo $profile['displayName'];?>'/></td>
</tr>
<tr>
<td height="45"><div align="right"><font color="#333333" size="3" face="Arial, Helvetica, sans-serif">Email :</font> <br />
</div></td>
<td><div align="left">
<input name="email" id="email" type="text" size="30" value='<?Php echo $profile['email'];?>'/>
<input name="propic" id="propic" type="hidden" size="30" value='<?Php echo $profile['photo'];?>'/>
</div></td>
</tr>
<tr>
<td height="81"><div align="right"><font color="#333333" size="3" face="Arial, Helvetica, sans-serif">Security :</font> <br />
</div></td>
<td><div align="center"><img src="CaptchaSecurityImages.php?width=150&height=40&characters=8" alt="captcha"/></div>
<p>
<input name="security_code" id="security_code" type="text" size="30" />
</p></td>
</tr>
<tr>
<td height="45"><div align="right"><font color="#333333" size="3" face="Arial, Helvetica, sans-serif">Password:</font> <br />
</div></td>
<td><div align="left">
<input name="password" id="password" type="text" size="30" />
</div></td>
</tr>
<tr>
<td height="45"> </td>
<td><div align="left">
<input type='submit' name="submit" id="submit" value='Sign Up'/>
</div></td>
</tr>
</table>
</form></td>
<td width="6" align="center"></td>
<td width="475" align="center" valign="top"><form method='post' id='login_form'>
<table width="300" height="176" >
<tr>
<td height="19" colspan="2"> </td>
</tr>
<tr>
<td height="36"><div align="right"><font color="#333333" size="3" face="Arial, Helvetica, sans-serif" >Email :</font> <br />
</div></td>
<td><div align="left">
<input name='emailenter' type='text' id='emailenter' size="25" />
</div></td>
</tr>
<tr>
<td height="45"><div align="right"><font color="#333333" size="3" face="Arial, Helvetica, sans-serif">Password :</font> <br />
</div></td>
<td><div align="left">
<input name='passcode' type='password' id='passcode' maxlength='15' size="25" />
</div></td>
</tr>
<tr>
<td height="45"> </td>
<td><div align="left">
<input type='submit' name='submit' value='Login'/>
<a href="ForgotPassword.php">Forgot Password?</a></div></td>
</tr>
</table>
</form></td>
</tr>
</table></td>
</tr>
<tr>
<td height="23" valign="top" align="center" > </td>
</tr>
</table>
</div>
<!-- end #content -->
<div style="clear: both;"> </div>
</div>
</div>
<!-- end #page -->
<div id="footer-bgcontent">
<div id="footer">
<p>Copyright (c) . </p></div>
</div>
<!-- end #footer -->
</div>
</body>
</html>
Please just focus on the logo div. It suddenly moves to the middle on different screen size etc. Hope you can help. -
Dear All,
After a power outage, one of our CSS is failing to boot up properly. Every time its rebooted, it goes straight to the OFFDM although the Primary boot device has been selected to be Disk. I have formatted the
Disk and loaded a new image, it booted with the new image once and its
Loading to OFFDM every time its rebooted.
I would be really grateful if someone could shed some light on this problem.
Regards,
ZahidYou could check the boot.log for error messages inorder to find out what the problem could be.
Here's the link to Troubleshooting the Boot Process:
http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_installation_guide_chapter09186a00800df9dc.html#xtocid1
Hope this is of some help to you.
For details refer:
http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_500/getstart/trouble.htm#xtocid4 -
Hi
I am using the following css to align a div to the right hand
side of the
page:
#headerRight { RIGHT: 10px; MARGIN-RIGHT: 0px; POSITION:
absolute; TOP: 5px;
align: right; border: 0; width: 235px;}
The above seems to work well, except for one small annoying
problem. If the
content of the page is wide and causes the horizontal scroll
bar to appear,
then the div seems to work as it appears 10px from the right
side of the
window. However if I move the horizontal scroll bar over to
the right, then
the div doesnt move accordingly.
If I then resize the browser window, then the div moves and
always lines up
10px from the edge no matter what size the window is.
Anyone know where I am going wrong, or need any more
information?
Thanks
Brendan
Rate your experiences with your UK and Ireland builders at
http://www.ratethebuilder.co.uk
=========================================Solved the problem by using the following javascript code:
function scrollDetect(){
document.getElementById("headerRight").style.left =
document.body.clientWidth - 245 + document.body.scrollLeft;
setInterval("scrollDetect()", 500);
Where 245 is the width of the div.
Only problem is that the code probably isnt cross browser at
the moment, but
I'll work on that.
Thanks again for all your help.
Rate your experiences with your UK and Ireland builders at
http://www.ratethebuilder.co.uk
=========================================
"RateTheBuilder" <[email protected]>
wrote in message
news:[email protected]...
> Osgood
>
> Sorry, would love to post a url, but content is
sensitive.
>
> Basically I have a div which stretches the width of the
page which
> contains the header details. Then on top of this div but
to the very right
> of the page I have a div that I have absolute
positioning set. This div
> must remain the set distance from the right of the
screen (10px) even when
> the user is scrolling horizontally.
>
> Thanks for your time so far and I hope I've shed a
little more light.
>
> Brendan
> ______________________________________________
> Rate your experiences with your UK and Ireland builders
at
>
http://www.ratethebuilder.co.uk
> =========================================
>
> "Osgood" <[email protected]> wrote in
message
> news:[email protected]...
>> RateTheBuilder wrote:
>>
>>> Osgood
>>>
>>> There is no content on the same level as the div
to the right, but the
>>> content below the div may extend the width of
the page. There are other
>>> divs on the same level as the one I want to keep
right and I have the
>>> problem div above them, so that is why I used
absolute positioning.
>>
>> Sorry i'm lost.
>>
>> You say you have no content on the same level as the
div to the right and
>> then say there are other divs on the same level as
the one you want to
>> keep right?
>>
>> Can you post a url to the page in question?
>>
>
>
Maybe you are looking for
-
Mac Pro 2009 with SSD Problems since mavericks
I am having constant problems with my mac pro early 2009 since Mavericks. It is a standard mac pro but now has a crucial m500 ssd as the main drive. I originally put a OWC 120gb SSD in then changed it for a 240gb OWC SSD as I blamed the SSD for my pr
-
Hello Everybody, I have a problem concerning the following extractors : 2LIS_02_ITM, 2LIS_02_SCL, 2LIS_03_BF, 2LIS_03_UM and 2LIS_04_P_MATNR. There is no transfer between LBWQ et RSA7 : there are many data in LBWQ but no data in RSA7. All data are bl
-
Is it possible to add files to a PDF form submission?
Hi there, Someone asked me to add an attachment field to a PDF dynamic form. Based on previous research we figured out that will not be possible: our users don't have Acrobat - just Reader - and we won't purchase Reader Extensions. How about using a
-
Hi All, I have table data like this.... select 1 ID,'[email protected]' EMAIL,'[email protected]' MGRMAIL,'01-JUN-12' SDATE,'30-JUN-12' LDATE FROM DUAL UNION select 1 ID,'[email protected]' EMAIL,'[email protected]' MGRMAIL,'01-JUL-12' SDATE ,'31-MAY-13' LDATE FROM DUAL
-
FTP CONNECTION PARAMETER, SERVER & PORT
HI m new to xi, i m working with file to file scenario. while creating the sender communication channel for file adapter for the FTP connection parameters, what to give for the server. i dont know my server ip address. m having my own system. i insta