http to https switching

http to https switching

am 08.01.2008 21:34:05 von LVP

Hello,

What are the ways to switch from http to https.

Is there a way internal to IIS 6.0 or x.xx? Some configuration?
Is there a way via DNS?

I have seen Scripts in VB and JavaScript

What are my choices when the website has multiple entry points.

We are running IIS 6.0 on Win2K3 using CRM

Thank you,

LVP

Re: http to https switching

am 08.01.2008 22:07:34 von George Ter-Saakov

A bit confused by your question.
https implies that browser had send server information encrypted.

So you can not do "internal" switching. You can always check
Request.IsSecureConnection and redirect to secured version with https if
you need to

George.


"LVP" wrote in message
news:egtDQXjUIHA.1744@TK2MSFTNGP05.phx.gbl...
> Hello,
>
> What are the ways to switch from http to https.
>
> Is there a way internal to IIS 6.0 or x.xx? Some configuration?
> Is there a way via DNS?
>
> I have seen Scripts in VB and JavaScript
>
> What are my choices when the website has multiple entry points.
>
> We are running IIS 6.0 on Win2K3 using CRM
>
> Thank you,
>
> LVP
>
>
>

Re: http to https switching

am 08.01.2008 22:53:48 von LVP

George,

Sorry for the confusion.

when a user types: http:\\www.mysecurewebsite.com I want them to be
directed to https://www.mysecurewebsite.com
I have done this on two of my websites.
when a website has multiple entries and I have no control of the website
code at all I need to redirect the user to the https in the easiest way
possible

Is there a way internal to IIS 6.0 or x.xx? Some configuration?
Is there a way via DNS?

I have seen Scripts in VB and JavaScript

What are my choices when the website has multiple entry points.

We are running IIS 6.0 on Win2K3 using CRM

Any more questions please let me know

Thank You,

LVP


"George Ter-Saakov" wrote in message
news:e4Ws%23pjUIHA.1204@TK2MSFTNGP03.phx.gbl...
>A bit confused by your question.
> https implies that browser had send server information encrypted.
>
> So you can not do "internal" switching. You can always check
> Request.IsSecureConnection and redirect to secured version with https if
> you need to
>
> George.
>
>
> "LVP" wrote in message
> news:egtDQXjUIHA.1744@TK2MSFTNGP05.phx.gbl...
>> Hello,
>>
>> What are the ways to switch from http to https.
>>
>> Is there a way internal to IIS 6.0 or x.xx? Some configuration?
>> Is there a way via DNS?
>>
>> I have seen Scripts in VB and JavaScript
>>
>> What are my choices when the website has multiple entry points.
>>
>> We are running IIS 6.0 on Win2K3 using CRM
>>
>> Thank you,
>>
>> LVP
>>
>>
>>
>
>

Re: http to https switching

am 08.01.2008 23:22:37 von mark

"LVP" wrote in message
news:egtDQXjUIHA.1744@TK2MSFTNGP05.phx.gbl...

> What are the ways to switch from http to https.

This is all you need:
http://www.codeproject.com/KB/web-security/WebPageSecurity_v 2.aspx


--
Mark Rae
ASP.NET MVP
http://www.markrae.net

Re: http to https switching

am 09.01.2008 00:19:58 von LVP

Thanks Mark,

I read the article and there are some issues noted in the discussion.
I wonder if there is a concrete solution with less configuration.

The big cheese/wig wants it done in less than 48 hours on production without
testing or leaving very little time for testing.
How to convince the monster not the monkey around I don't know.

Thanks

LVP


"Mark Rae [MVP]" wrote in message
news:ueyv5TkUIHA.1744@TK2MSFTNGP05.phx.gbl...
> "LVP" wrote in message
> news:egtDQXjUIHA.1744@TK2MSFTNGP05.phx.gbl...
>
>> What are the ways to switch from http to https.
>
> This is all you need:
> http://www.codeproject.com/KB/web-security/WebPageSecurity_v 2.aspx
>
>
> --
> Mark Rae
> ASP.NET MVP
> http://www.markrae.net

Re: http to https switching

am 09.01.2008 10:08:25 von DFS

LVP:
If you are looking for a quick hack ... This is a decent one
http://blog.kyanmedia.com/archives/2007/6/28/forcing_https_i n_iis_60/

An alternative, does your company use a network load balancer or firewall in
front of your web servers? If so, you might be able to solve it there.
Most NLB/firewalls have a built in feature to push http traffic to use
https.

Hope this helps.

-Naraen
http://naraen.spaces.live.com


"LVP" wrote in message
news:OJNf9zkUIHA.1164@TK2MSFTNGP02.phx.gbl...
> Thanks Mark,
>
> I read the article and there are some issues noted in the discussion.
> I wonder if there is a concrete solution with less configuration.
>
> The big cheese/wig wants it done in less than 48 hours on production
> without testing or leaving very little time for testing.
> How to convince the monster not the monkey around I don't know.
>
> Thanks
>
> LVP
>
>
> "Mark Rae [MVP]" wrote in message
> news:ueyv5TkUIHA.1744@TK2MSFTNGP05.phx.gbl...
>> "LVP" wrote in message
>> news:egtDQXjUIHA.1744@TK2MSFTNGP05.phx.gbl...
>>
>>> What are the ways to switch from http to https.
>>
>> This is all you need:
>> http://www.codeproject.com/KB/web-security/WebPageSecurity_v 2.aspx
>>
>>
>> --
>> Mark Rae
>> ASP.NET MVP
>> http://www.markrae.net
>
>

Re: http to https switching

am 09.01.2008 11:15:00 von mark

"LVP" wrote in message
news:OJNf9zkUIHA.1164@TK2MSFTNGP02.phx.gbl...

> I wonder if there is a concrete solution with less configuration.

I'm not sure how much less configuration you could want...

You simply add the DLL to your project and then make a few modifications to
web.config...

> The big cheese/wig wants it done in less than 48 hours

It should take no longer than five minutes...


--
Mark Rae
ASP.NET MVP
http://www.markrae.net

Re: http to https switching

am 09.01.2008 16:57:32 von LVP

thank you for you input,

You miss understood me.
I think it is irresponsible to change something in 5 minutes then deploy it
on production without any thorough testing.

I don't have full trust of the solution yet. it might be the perfect one.

Thanks again

LVP



"Mark Rae [MVP]" wrote in message
news:eb$w9hqUIHA.476@TK2MSFTNGP03.phx.gbl...
> "LVP" wrote in message
> news:OJNf9zkUIHA.1164@TK2MSFTNGP02.phx.gbl...
>
>> I wonder if there is a concrete solution with less configuration.
>
> I'm not sure how much less configuration you could want...
>
> You simply add the DLL to your project and then make a few modifications
> to web.config...
>
>> The big cheese/wig wants it done in less than 48 hours
>
> It should take no longer than five minutes...
>
>
> --
> Mark Rae
> ASP.NET MVP
> http://www.markrae.net

Re: http to https switching

am 09.01.2008 17:47:17 von mark

"LVP" wrote in message
news:O0RXZhtUIHA.5288@TK2MSFTNGP04.phx.gbl...

> "Mark Rae [MVP]" wrote in message
> news:eb$w9hqUIHA.476@TK2MSFTNGP03.phx.gbl...
>> "LVP" wrote in message
>> news:OJNf9zkUIHA.1164@TK2MSFTNGP02.phx.gbl...
>>
>>> I wonder if there is a concrete solution with less configuration.
>>
>> I'm not sure how much less configuration you could want...
>>
>> You simply add the DLL to your project and then make a few modifications
>> to web.config...
>>
>>> The big cheese/wig wants it done in less than 48 hours
>>
>> It should take no longer than five minutes...

> You misunderstood me.

Likewise, I think...

> I think it is irresponsible to change something in 5 minutes then deploy
> it on production without any thorough testing.

So do I, and that's not in fact what I said...

When I mentioned five minutes, I was referring to the time required to do
the configuration, not the testing...


--
Mark Rae
ASP.NET MVP
http://www.markrae.net

Re: http to https switching

am 10.01.2008 18:23:56 von LVP

Naraendirakumar,

This works but

the Change the Message Type to URL does not work, I had to use
Also getting security challenge dialog, which is site related.

When using URL I get File can not be displayed, so it tried to redirect but
fails to see the file.
Not sure why.

Any ways, File works for now
Might try different solutions.

Thanks,

LVP


"Naraendirakumar R.R." wrote in message
news:uNsE0$pUIHA.4752@TK2MSFTNGP05.phx.gbl...
> LVP:
> If you are looking for a quick hack ... This is a decent one
> http://blog.kyanmedia.com/archives/2007/6/28/forcing_https_i n_iis_60/
>
> An alternative, does your company use a network load balancer or firewall
> in front of your web servers? If so, you might be able to solve it there.
> Most NLB/firewalls have a built in feature to push http traffic to use
> https.
>
> Hope this helps.
>
> -Naraen
> http://naraen.spaces.live.com
>
>
> "LVP" wrote in message
> news:OJNf9zkUIHA.1164@TK2MSFTNGP02.phx.gbl...
>> Thanks Mark,
>>
>> I read the article and there are some issues noted in the discussion.
>> I wonder if there is a concrete solution with less configuration.
>>
>> The big cheese/wig wants it done in less than 48 hours on production
>> without testing or leaving very little time for testing.
>> How to convince the monster not the monkey around I don't know.
>>
>> Thanks
>>
>> LVP
>>
>>
>> "Mark Rae [MVP]" wrote in message
>> news:ueyv5TkUIHA.1744@TK2MSFTNGP05.phx.gbl...
>>> "LVP" wrote in message
>>> news:egtDQXjUIHA.1744@TK2MSFTNGP05.phx.gbl...
>>>
>>>> What are the ways to switch from http to https.
>>>
>>> This is all you need:
>>> http://www.codeproject.com/KB/web-security/WebPageSecurity_v 2.aspx
>>>
>>>
>>> --
>>> Mark Rae
>>> ASP.NET MVP
>>> http://www.markrae.net
>>
>>
>
>