crossdomain not loaded for secure services

DavidAalbers

Setting up a non-secure (http) flexviewer to load some secure services at startup. User logs in and a request is sent to get a token. When loading, flexviewer gives error

Warning: Failed to load policy file from "https://<server>/crossdomain.xml"

. This causes a fault to return from the token request. The crossdomain file shows in my browser fine, looks like:

<?xml version="1.0" encoding="utf-8" ?> 
<!DOCTYPE cross-domain-policy SYSTEM
  "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd"> 
<cross-domain-policy> 
<site-control permitted-cross-domain-policies="master-only" /> 
<!--  file access --> 
<allow-access-from domain="*" secure="false" />  
<allow-http-request-headers-from domain="*" headers="SOAPAction" secure="false" />  
</cross-domain-policy>

Here's the catch: In FIREFOX, the crossdomain file is accepted and secure layers load fine. Just not IE! Am using a self signed certificate. Any ideas?