+1-888-365-2779
Try Now
More in this section

Forums / Designing with Sitefinity / Redirect from https to http - intended?

Redirect from https to http - intended?

4 posts, 0 answered
  1. olav
    olav avatar
    76 posts
    Registered:
    22 Jan 2007
    20 Apr 2010
    Link to this post
    Hi,

    I just published a Sitefinity project to the root of a server with an enabled SSL certificate. No redirects are set in IIS7.5, and the edge server forwards SSL and non-SSL requests using default ports. The page https://mysite/test.txt (dummy test file) displays like expected, but the web could otherwise not be accessed using https://mysite/home.aspx as it redirects to http://mysite/home.aspx.

    After looking over all IIS and web.config once more I decided to test the Sitefinity page property setting "Require SSL", displaying help text "Specifies whether this page will require a secured socket connection (HTTPS). There should be a SSL installed on the server.".
    Ok, this time https://mysite/home.aspx  stays and http://mysite/home.aspx is redirected to https://mysite/home.aspx.

    Is this behavior intended?
    I had hoped that SSL could be requested optionally by the user (writing https), for some scenarios.
    Any setting to work this in web.config?

    Thanks,
    -olav
  2. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    19 Sep 2016
    20 Apr 2010
    Link to this post
    Hello olav,

    If you want to use SSL with any page you should set Require SSL property. Otherwise the page uses the not secured port and http protocol.

    Sincerely yours,
    Ivan Dimitrov
    the Telerik team

    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items.
  3. Connections Academy Developer
    Connections Academy Developer avatar
    151 posts
    Registered:
    04 May 2005
    08 Nov 2011
    Link to this post
    Sorry to resurrect an old thread. 

    Olav: This can be done if the cert is installed on a load balancer, and not in IIS. We did this accidentally.
  4. olav
    olav avatar
    76 posts
    Registered:
    22 Jan 2007
    08 Nov 2011
    Link to this post
    Thanks!
    I will retry at next opportunity.
    Did you use SF3.7 or 4.x?
    Thanks again.
Register for webinar
4 posts, 0 answered