Link to home
Start Free TrialLog in
Avatar of PDSWSS
PDSWSS

asked on

How would I redirect an HTTP URL to a HTTPS URL?

We have URL that I would like to redirect to an HTTPS url.

Tried  redirect function in IIS7 but did not work.  Does redirect in IIS only work when redirecting  HTTP to HTTP?

Thanks
Avatar of Frosty555
Frosty555
Flag of Canada image

Not sure if this is your issue, but If your site *requires* SSL, then it will fail with a 403 Forbidden error before it gets a chance to perform any sort of HTTP redirect.

Depending on what you're using IIS for, it may not be advisable to change the SSL requirements to allow non-SSL connections. For example, when you're working with Outlook Web Access on Exchange Server all the various Exchange Server related sites inherit their settings from the top level "Default Web Site", which is where the SSL Required flag is set. If you change it, you have to go into all of the sub-sites and manually reconfigure them to require SSL, it's a significant configuration change to get it working and IMHO quite scary to do to a production Exchange server.

If this is what your problem is, one thing I've done successfully is create a custom "403.4" Error Page under Default Web Site, configure it to respond with a 302 Redirect to your HTTPS address. The 403.4 error code is specifically the "Forbidden because SSL is required" error code.

Works like a charm for me.

User generated image
Avatar of PDSWSS
PDSWSS

ASKER

Thanks. To clarify, I had set up this redirect for our Sharepoint site 3 years ago, after I secured the site with an HTTPS URL and a certificate.  

When I renewed the certificate the redirect stopped working. Unfortunately I do not remember how I set it up.
Avatar of hecgomrec
Redirect will work only in you are using a different site... lets says if users types: remote.yourdomain.com you'll redirect to remoteweb.yourdomain.com and for this you'll create a site in your II7 with the redirect option.

To enable or force the use of https open for the desire site the SSL Settings and click on Require SSL and the type of Client certificate to use.

Remember to add a binding on the website to the SSL port and IP you need.
Avatar of PDSWSS

ASKER

Have not had the time to check the solution. Will do as soon as possible. Thanks
Avatar of PDSWSS

ASKER

hecgomrec:   Odd set of events.

I followed your suggestion and then tried  the http URL and I got an empty page.
Next I undid the changes to the SSL settings page that you had suggested and just for the fun of it tried the  http URL again. Now it SURPRISINGLY redirected to the HTTPS URL and the site opened.
Hard to explain this behavior.  Should I give you the points?  Have no idea what caused the redirect to work after I unconfigured the SSL changes that you suggested.

This issue is solved but not really clear what fixed the issue. Thanks
PDSWSS - could this have been a browser caching issue? Or you needed to do an iisreset and restart the IIS services before the changes took effect?
Avatar of PDSWSS

ASKER

Could have been a browser caching issue.  But all URLS and redirects were the same as
before I upgraded the certificate so not clear how would be a caching issue.

Not an iisreset issue since I had reset IIS multiple times.
Thanks
Well I'm not here for the points, I'm happy that is working but will try to figure out how if you don't have a SSL port binding you can still go to it.  Or are we missing something????
Avatar of PDSWSS

ASKER

There is a certificate binding to port 81 for this URL that I set up in IIS7.
Doesn't that indicate that SSL port binding has been set up?
ASKER CERTIFIED SOLUTION
Avatar of PDSWSS
PDSWSS

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of PDSWSS

ASKER

Experts provided input but none of the suggestions solved the issue. Thanks,
Come on... miracle!!!!