Redirect to SSL using IIS7 UrlRewrite

I am using IIS7's new UrlRewrite engine (http://learn.iis.net/page.aspx/460/using-url-rewrite-module/). I want to redirect certain pages to an SSL page, and keep other pages off SSL for unneccessary encryption processing.

So far I have the redirect to SSL rule started, but it is not working. I am trying to keep a list of secure pages in the rewritemaps for easy maintenance and adding more secure pages in the future. Does anyone see why this is not working?
<rules>
	<rule name="RequiresSSL-Redirect" stopProcessing="true">
		<match url="(.+)" />
		<conditions>
			<add input="{HTTPS}" pattern="off" />
			<add input="{RequiresSSL:{R:1}}" pattern="(.+)" />
		</conditions>
		<action type="Redirect" url="https://{HTTP_HOST}/{C:1}" appendQueryString="true" redirectType="Permanent" />
	</rule>
</rules>
<rewriteMaps>
	<rewriteMap name="RequiresSSL">
		<add key="path/to/secure/page.aspx" value="path/to/secure/page.aspx" />
		<add key="nextpath/to/secure/page.aspx" value="nextpath/to/secure/page.aspx" />
	</rewriteMap>
</rewriteMaps>

Open in new window

bemara57Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

cj_1969Commented:
You might want to try this ... http://www.codescene.com/2006/03/redirecting-http-to-https-usin.php

The method here is that you just enable the SSL required for the pages that require it and then let the built-in error pages handle the redirection for you by customizing the 403.4 error code for the site or specific sub-site or directory.  I have used this in the past and it works well.  You can do this for an entire site, just make the entire site SSL required and remove the requirement for this one redirect page.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
cj_1969Commented:
If you want to use the rewrite capability then check out this page ... http://ruslany.net/2009/04/10-url-rewriting-tips-and-tricks/

It has rules for a number of common rewrite situations, including http to https.
0
meverestCommented:
>> So far I have the redirect to SSL rule started, but it is not working.

what is happening that is different to what you expect?  Does it throw an error or does it not switch to ssl when you think it should?

Cheers.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
.NET Programming

From novice to tech pro — start learning today.