Solved

SSL Certificates, IIS 7.0, Windows 2008

Posted on 2013-06-06
6
384 Views
Last Modified: 2013-06-07
For my web site I use relational file structure but there are a few instances where I use the fully qualified domain URL.  I think when I apply the SSL to a folder that is using a relastional link from a web page the browser will automatically convert to the https://.  In the case of the FQD name I would have to manually change those links to https://

Is this correct or am I wrong how to handle the FQD links and those relational links?
0
Comment
Question by:kdschool
  • 3
  • 2
6 Comments
 
LVL 76

Expert Comment

by:arnold
ID: 39227811
The SSL applies to the site and not to folders.
You can configure a folder to require SSL.

If you want certain folder to only be accessed via a secure connection, setup a virtual folder with the same name as the folder pointing to the same folder as its root and there within the security to, you can require that access be only through SSL.

Any reference to this folder from any document outside this folder must be by way of https://yourdomainname/folder
0
 
LVL 23

Expert Comment

by:Coralon
ID: 39227843
The browser is not going to automatically redirect to https.  You have to do that in code on the site.

Coralon
0
 

Author Comment

by:kdschool
ID: 39228749
so are you saying if it's just a file I am pointing to the URL on my side that points to that file has to be changed from http   to https after I set up the SSL certificate on the server and apply that to the folder where the files resides.?
0
Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

 
LVL 76

Expert Comment

by:arnold
ID: 39228894
The certificate goes to the entire site and not the folder.  The "virtual folder" that points to the same folder has to have its security settings adjusted to require access via SSL only in order to prevent non-encrypted access.

Though you can not easily require SSL access to a single file.
0
 

Author Comment

by:kdschool
ID: 39229203
https://yourdomainname/folder

Scenario, I have a secured folder with SSL.  The user then tries to access a file in that folder and he is authorized to view the file.  You are saying that my web page that has this link on it will have to have https://domain/foldername/filename for them to see the file.

So I do have to use the FQD name in the link to display the file to the user instead of how I do it now with http://folder/filename  where the actual server knows that the file is using the http: extension.

I am trying to understand from a web development stand point how to handled my links when the file is in a SSL protected folder.
0
 
LVL 76

Accepted Solution

by:
arnold earned 500 total points
ID: 39229267
Http://folder/filename is not valid
You may mean http:/folder/filename
You can try https:/folder/filename
But to your question, yes if you are accessing your site via http and need the user to access a secured resource, you must use a complete https://yourdomain/folder/filename as a link to the file.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

If you don't have the right permissions set for your WordPress location in IIS, you won't be able to perform automatic updates. Here's how to fix the problem.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now