IIS Server Security - HTTPS Required

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > March 2007 > HTTPS Required





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author HTTPS Required
RAJ

2007-03-22, 7:23 pm

Hello,
I have a website with a third party SSL cert installed. Require SSL in
configured on the site. My problem is if someone types www.preferredipa.com
in a browser they get the following message:

HTTP Error 403
403.4 Forbidden: SSL required
This error indicates that the page you are trying to access is secured with
Secure Sockets Layer (SSL). In order to view it, you need to enable SSL by
typing "https://" at the beginning of the address you are attempting to reach.
Please contact the Web server's administrator if the problem persists.

If https:// is used the site comes up fine. How can I get the site to
appear if one simply types in www.preferredipa.com
My second problem is this website is hosted w/ Network Solutions and because
of this I'm unable to obtain any info on IIS version... and they are of no
help with trying to solve this problem. Please advise.

Thank you in advance.

RAJ
--
RAJ
David Wang

2007-03-23, 1:26 am

This happens because when you type www.prefferredipa.com, the browser
tries via HTTP -- and since website has "require SSL", this plain HTTP
request will be rejected with 403.4.

You should ask your webhoster to configure your website to
automatically redirect from HTTP to HTTPS -- because they have to
reconfigure the 403.4 Custom Error in IIS for you since you do not
have such access to IIS -- so they should have the standard HTTP-to-
HTTPS redirection code already. If not, you can search the web for it
and have them configure it for you.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//



You must redirect from HTTP to HTTPS with a Custom Error page on
403.4.
On Mar 22, 4:25 pm, RAJ <R...@discussions.microsoft.com> wrote:
> Hello,
> I have a website with a third party SSL cert installed. Require SSL in
> configured on the site. My problem is if someone typeswww.preferredipa.com
> in a browser they get the following message:
>
> HTTP Error 403
> 403.4 Forbidden: SSL required
> This error indicates that the page you are trying to access is secured with
> Secure Sockets Layer (SSL). In order to view it, you need to enable SSL by
> typing "https://" at the beginning of the address you are attempting to reach.
> Please contact the Web server's administrator if the problem persists.
>
> If https:// is used the site comes up fine. How can I get the site to
> appear if one simply types inwww.preferredipa.com
> My second problem is this website is hosted w/ Network Solutions and because
> of this I'm unable to obtain any info on IIS version... and they are of no
> help with trying to solve this problem. Please advise.
>
> Thank you in advance.
>
> RAJ
> --
> RAJ



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com