Web Forms :: How To Use HTTPS In Website
May 7, 2015How to achieve this security feature which is shown in url bar (https) ?
View 1 RepliesHow to achieve this security feature which is shown in url bar (https) ?
View 1 RepliesI purchased a certificate from my hosting provider from my web site. There was some confusion as to whether I needed to use IIS to install it or if they would. After a few days and several phone calls they said they had it installed and configured, but when I tried to set up rewrite rules in web.config the site would not load. When I point my browser to https:mydomain it would load, but there was not green lock in the address bar and 'HTTPS' was not green. I contacted them again and after explaining the situation and being put on hold for 45 minutes I hung up. This morning the the site is working and HTTPS appears to be configured correctly.
I could find no changes to web.config on redirection, so how is it being redirected to HTTPS? I'm concerned that when I post changes to the site I could wipe out what ever they did to get it to work with HTTPS. Could changes been made 'above' my site on the server that I can't affect? Should I be concerned?
I just moved our website to a new server(windows 2008, IIS7.5). this website needs to do post to an outside https website to get the data back, but
it deesn't work. when i put the https: website on the IE address bar, it failed. I am wondering what setting i need to change to enable https: website to go through on the server?
There are 2 web-servers involved:
Webserver1 has been in the organization a few years and is hosting/running multiple websites with https encryption (app1.ourcompany.com, app2.ourcompany.com, etc). It has a valid, signed certificate.
Webserver2 is a new server, for which I am responsible. I am tasked with setting up https and getting the certificate, etc. It has a web app running on it, but it does not have a domain name (only has an IP address)...which as I recently learned, is a requirement for a signed certificate.
What I'd like to know is this -- is it possible to set up a site on Webserver1 that points to the site I'm hosting on Webserver2 (ie SiteOnWebserver2.ourcompany.com) which also utilizes the Webserver1's signed/verified certificate?
What I want to do is like the web browser. When you visit a https web site, the browser will download and install the X.509 Certification automatically.
I have a application which will be installed in PC, and the application will post to a https website. So if the certification is expired, the App should download a new one.
So, how can I get the certification? A stream is always good, I can make it to certification.
i have to build a small webapp for a company to maintain their business data... Only those within the company will be using it, but we are planning to host it in public domain, so that the employees can connect to app from various locations. (Till now I have built web apps that are hosted internally only)
I'm wondering whether I need to use a secured connection (https) or just the forms authentication is enough.
What should I do to prepare my website for https. (Do I need to alter the code / Config) Is SSL and https one and the same... Do I need to apply with someone to get some license or something. Do I need to make all my pages secured or only the login page...
We are planning to move our website to https, which currently running on only http only. Web site is running on IIS7 in Windows 2008 server. Do I need to update/modify any configuration settings in the website to make it work on HTTPS? Is it fine just installing certifictes?
View 3 RepliesI have one asp.net application i need to make my website secure..
View 2 RepliesI'm working on a CMS that can run either with or without https enabled on the webserver. I'd like to be able to detect whether https is enabled or not, so that I can act accordingly (for example, display some https-related options to the administrator, and redirect to https for administrator logins).
I'm not looking for Request.IsSecureConnection because that only tells me if the current request is via https. I want something that will tell me whether the current bindings for the site in IIS include a binding for https at the same domain as the current request is on. So, for example, even if the current request is for [URL] and thus not secure, I want to know whether [URL] would work so I can (for example) redirect the user to it if they log in as administrator.
I've had no luck looking for anything in System.Web.Configuration that will tell me about the bindings of the current site, though.
I'd like my application to query a csv file from a secure website. Currently I have the user login to the site, manually query the csv, and have my application load the file locally. I'd like to automate this by having the user enter his login information, authenticating him on the website, and querying the data. The application is written in C# .NET. The url of the site is: https://www2.emidas.com/default.asp.
I've tested the following code already and am able to access the file once the user has already authenticated himself and created a manual query.
System.Net.WebClient Client = new WebClient();
Stream strm = Client.OpenRead("https://www3.emidas.com/users/<username>/file.csv");
Here is the request sent to the site for authentication. I've angle bracketed the real userid and password.
POST /pwdVal.asp HTTP/1.1
Accept: image/jpeg, application/x-ms-application, image/gif, application/xaml+xml, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; Tablet PC 2.0; OfficeLiveConnector.1.4; OfficeLivePatch.1.3; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip, deflate
Cookie: ASPSESSIONID<unsure if this data contained password info so removed>; ClientId=<username>
Host: www3.emidas.com
Content-Length: 36
Connection: Keep-Alive
Cache-Control: no-cache
Accept-Language: en-US
client_id=<username>&password=<password>
after installing ssl for a website (by host admin)
all of pages are https now,
I need one http page? it is related to programming or iis?
Programatically is it possible using C# or script 1. To attach certificate to the https binding of website in IIS 7.5(from a drop down).
View 1 RepliesI have ajax autocompleteextender and it is working fine with our test enviornment where we dont have secured HTTP. But while moving the code to Qa, which runs on HTTPS, AutoCompleteExtender stops working. I debugged and see control is going to webservice but unable to fetch data or call database from webservice.
View 1 RepliesI wrote a code to send file as below:
[Code]....
When I tried to send file to the URI stated above, the server throw the status 400 back to me when I tried to get the response from the server, and the https server doesn't receive any file. While I changed the URI to point to another server, which is a http server, the code works fine and able to send file to the server. I would like to know why the code above is not able to send the file to the https server?
PS:
[Code]....
I don't know which forum to post.
I need my asp.net application upload a file (some times the size is around 500M) from client to server.
I tried to use <input type="file" in website, and code with[Code]....
But this is HTTP protocol, right?
Is there any security protocol to upload from a web page, such as using protocol HTTPS?
if there is, can anyone provie me a sample or url?
How to develop a https page in asp.net ....
View 1 Replieshow can i change HTTP to HTTPS.
View 1 RepliesHas anyone had issues with streaming CSV (or TXT) content to the browser over SSL/HTTPS.
There are no issues when running my code in Firefox - i've found a bunch of issues, all seem to be solved for people using PHP.
this.Response.ClearContent();
this.Response.ClearHeaders();
this.Response.Buffer = true;
...
this.Response.AddHeader("","") // headers
this.Response.Write("TXT STRING GOES HERE");
this.Response.Flush();
this.Response.End();
I've tried all different headers to remove the no-cache, pragma ...etc.
[code]....
I am creating an online job application using a wizard control.
When the user has completed the application, the finish button will fire javascript to re-render the data & print the application(the application data will not be saved to a database, email, xml, etc).
I want to ensure the users' personal info is safe while postbacks are being made (ie clicking the next button in the wizard steps).
Can someone give me a start as to what I need to be looking to do?
I've seen some things about viewstate encryption, but not sure if that's where I should begin, and/or if that's the only thing I need to do.
Or, If I were to disable viewstate all together would that be good enough?
how can i force one or more pages in Asp.net to use HTTPS rather then HTTP,
If there is any way to do that in web.config will be great.
[Code]....
This is the code behind a button. I get this error when pressing the button: "Unable to download ******* from ********. Unable to open this Internet site. The requested site is either unavailable or cannot be found. Please try again later."I have found a few posts about this error but I haven't found any solution yet.This works fine with other browser but not in IE.
Does anyone know why the lock that is to show when on an https site would show, but then vanish once the page is done loading?
View 2 RepliesI'm having real trouble redirecting pages from http to https on my live website. Everything is fine on my IDE but as soon as I upload it to my shared web host (123-reg.co.uk) I hit a problem. When I try to redirect to https using Response.Redirect it seems a loop occurs and the request is never carried out.
The code I've tried:
[Code]....
and
[Code]....
Both above methods worked fine in my IDE but not on my live system.
In IE nothing happens but in Firefox the below error is displayed:
"Firefox has detected that the server is redirecting the request for this address in a way that will never complete. "
Due to security restrictions, we must run our web site under the TLS variant of https (SSL is disabled on the server...only TLS is enabled on the server).
The problem we have is that some customers have TLS disabled in their Internet Explorer Tools/Internet Options/Advanced settings...and they get a "page cannot be displayed" error.
I need a way to tell those users to "go enable TLS on your browser" (like display a page for this saying this).
how I can determine if (with the server having only TLS...not SSL...enabled) if the browser can support the https?
In Global I have the following code that redirects the page to use HTTPS. I also have a SPROC that adds a record when a user visits a page. When a user visits a page, the SPROC is adding a record for the HTTP and then another record using the HTTPS. I'm not sure how to handle just adding one record. Is there something to add to the SPROC that will delete one of the records or should I do a code behind on an aspx page that executes the SPROC "IF" the page starts with HTTPS? HOw would I set up the condition to check for the HTTPS?
[Code]....