Solved

http and https on same website

Posted on 2004-09-24
4
156 Views
Last Modified: 2013-12-04
I am running windows 2000 advanced server, with a ssl certificate on one of our websites.  SSL appears to be working fine.

I am also running a php script (Oscommerce) that has both 'http' and 'https' links.  When I enable SSL on my website, ALL of the URLS need to start with https, so the http links don't work.  Also, my customers won't know to enter the 's' in front of the http, so that is a bad thing too.

So my question is, is it possible to have both http and https enabled on the same website? or do I have to have a workaround (Subdomains???)

TIA

Grandma
0
Comment
Question by:gobluegrandma
4 Comments
 
LVL 4

Expert Comment

by:beem4n
ID: 12149367
Hi,

yes it is possible, because in default environment
http uses 80 port and https use 443; go harvest you IIS options

anyway, if you cannot run it together you can do such a trick
make a web site, http running on 80 and name it mysite.com
after a user connects to it , redirect it to https://secure.mysite.com

0
 
LVL 12

Expert Comment

by:zvitam
ID: 12154189
here is some more in-depth information:

http://www.codeproject.com/aspnet/WebPageSecurity.asp
0
 

Author Comment

by:gobluegrandma
ID: 12155404
Well, it seems that if I disable the "Enable SSL" in the Web Properties on Information Services, both http and httpS URLS work.  

I was under the assumption that you need to check this option for the SSL to kick in and work. I guess all it does is make ALL the URLS secure.

Thank you for your help
Grandma
0
 
LVL 38

Accepted Solution

by:
Rich Rumble earned 500 total points
ID: 12161451
Yes, you can run both on the same server, http://www.iisfaq.com/?View=A407&Print=1
Typically you'd make a link to the "Secure" version of the site on the "un-secure" site, BUT with IIS I think you have to have a SECOND IP address to use... remember you need a second IP address for using an SSL (aka httpS) site. A Vhost will not use SSL.

or perhaps look at this answer from EE
http://www.experts-exchange.com/Networking/Microsoft_Network/Q_20773279.html
This little piece of vb code accomplishes both. All you have to do is copy this code into notepad and save it as an asp page in your default directory for the site you're working with, then enable it as the default document. This obviously prevents you from running anything else on the default web site...

<%

     If Request.ServerVariables("SERVER_PORT")=80 or Request.ServerVariables("SERVER_PORT")=443 Then
          Dim strSecureStr
          strSecureURL = "https://"
          strSecureURL = strSecureURL & "mail.domain.com"
          strSecureURL = strSecureURL & "/exchange"
          Response.Redirect strSecureURL
     End If
     %>

This code will basically take anything that comes in on port 80 OR port 443 and redirect it to https:// AND /exchange. If you're not redirecting to a virtual directory you'd just take that line out, and it would redirect anything coming in on 80 or 443 to httpS/.

-rich
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now