I'm the author of the SSL_module over at Snowcovered and am having a problem with 3.2.2 (and probably 4.0 as well).

My problem is this -
Users who use shared SSL cert's on hosting services basically have to switch domains to use the shared cert.  For example www.abc.com using secure would use https://www.bighost.com/abc to get to their DNN directory.

On earlier versions I've been using FormsAuthentication.SetAuthCookie(username,true/false) to log the users in when they switch sites and it's worked fine.  When I try this in DNN 3.2.2, I get a bad data then the membership routines go to retrieve the data. and the routines aborts (without try/catch BTW) with a "bad data" message on the decrypt.

Is there some other information that I need to include?  I've reviewed code in PortalSecurity.login and what I'm doing looks good.

Any thoughts on where to look?

Tom

---

Tom Thorp