Solved

http and https on same website

Posted on 2004-09-24
4
155 Views
Last Modified: 2013-12-04
I am running windows 2000 advanced server, with a ssl certificate on one of our websites.  SSL appears to be working fine.

I am also running a php script (Oscommerce) that has both 'http' and 'https' links.  When I enable SSL on my website, ALL of the URLS need to start with https, so the http links don't work.  Also, my customers won't know to enter the 's' in front of the http, so that is a bad thing too.

So my question is, is it possible to have both http and https enabled on the same website? or do I have to have a workaround (Subdomains???)

TIA

Grandma
0
Comment
Question by:gobluegrandma
4 Comments
 
LVL 4

Expert Comment

by:beem4n
ID: 12149367
Hi,

yes it is possible, because in default environment
http uses 80 port and https use 443; go harvest you IIS options

anyway, if you cannot run it together you can do such a trick
make a web site, http running on 80 and name it mysite.com
after a user connects to it , redirect it to https://secure.mysite.com

0
 
LVL 12

Expert Comment

by:zvitam
ID: 12154189
here is some more in-depth information:

http://www.codeproject.com/aspnet/WebPageSecurity.asp
0
 

Author Comment

by:gobluegrandma
ID: 12155404
Well, it seems that if I disable the "Enable SSL" in the Web Properties on Information Services, both http and httpS URLS work.  

I was under the assumption that you need to check this option for the SSL to kick in and work. I guess all it does is make ALL the URLS secure.

Thank you for your help
Grandma
0
 
LVL 38

Accepted Solution

by:
Rich Rumble earned 500 total points
ID: 12161451
Yes, you can run both on the same server, http://www.iisfaq.com/?View=A407&Print=1
Typically you'd make a link to the "Secure" version of the site on the "un-secure" site, BUT with IIS I think you have to have a SECOND IP address to use... remember you need a second IP address for using an SSL (aka httpS) site. A Vhost will not use SSL.

or perhaps look at this answer from EE
http://www.experts-exchange.com/Networking/Microsoft_Network/Q_20773279.html
This little piece of vb code accomplishes both. All you have to do is copy this code into notepad and save it as an asp page in your default directory for the site you're working with, then enable it as the default document. This obviously prevents you from running anything else on the default web site...

<%

     If Request.ServerVariables("SERVER_PORT")=80 or Request.ServerVariables("SERVER_PORT")=443 Then
          Dim strSecureStr
          strSecureURL = "https://"
          strSecureURL = strSecureURL & "mail.domain.com"
          strSecureURL = strSecureURL & "/exchange"
          Response.Redirect strSecureURL
     End If
     %>

This code will basically take anything that comes in on port 80 OR port 443 and redirect it to https:// AND /exchange. If you're not redirecting to a virtual directory you'd just take that line out, and it would redirect anything coming in on 80 or 443 to httpS/.

-rich
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Clickfree HD 7 96
Assess if java script has insecure coding issue 1 106
Possibility of Outlook running on Linux 6 109
What to look for in Fraud Protection Solutions  PoC 1 35
The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now