Re: Redirecting http:// to https:/

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 07/15/05 

Date: Thu, 14 Jul 2005 16:17:30 -0700

I cannot reproduce your issue. I set up IIS5 and configured "require SSL",
and when I type http://www.mydomain.com using IE6 I get the 403.4 error page
and redirected accordingly.

Is your 403.4 custom error page defined as an URL or a file?

Because if it is an URL and that URL is also in this website and requires
SSL... then you will get a 403 every time (client used HTTP to request an
URL that requires SSL, so IIS executes 403.4 custom error. But that custom
error tells IIS to execute another URL which also requires SSL -- which
obviously won't work since client used HTTP -- so IIS sends back a generic
403 instead).

I'm not certain how FireFox can make this situation work legitimately. Maybe
it is an undocumented FireFox "feature". 

-- 
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"msnews.microsoft.com" <john@a.com> wrote in message
news:%23T9RrlHiFHA.3436@tk2msftngp13.phx.gbl...
I have a similar yet different problem. I need help.
I have a website that I need SSL on the whole website.
I have created the website in IIS 5 and have added the SSL certificate and
turned it on.
I have set a custom redirect for 403.4.htm
If I type http://www.mydomain.com using IE 6 I get a 403.htm error
If I use firefox the redirect works every time.
If I type in https://www.mydomain.com/ I get the correct page for both
firefox and IE
I would appreciate knowing why I have this problem.
regards,
Mark

Relevant Pages

  • Re: iis 6 ssl redirect initial login encrypted?
    ... that contained the file and I had to disable SSL for the virtual directory ... Select "Allow Anonymous Authentication" and disable the other ... I'm not sure how to do it for just my custom error page. ... I've configured IIS 6 to redirect to ssl using a custom error 403.4 ...
    (microsoft.public.inetserver.iis.security)
  • Re: iis 6 ssl redirect initial login encrypted?
    ... You should only need to make those configuration changes for the actual file itself. ... that contained the file and I had to disable SSL for the virtual directory ... Select "Allow Anonymous Authentication" and disable the other authentication ... > I'm not sure how to do it for just my custom error page. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Redirecting http:// to https:/
    ... If you get "Secure Channel Required", then the URL for the custom error is ... Enable "Require SSL" for the vdirs that you need to force SSL ... The redirect URL is invalid. ... Dim strSecureURL ...
    (microsoft.public.inetserver.iis.security)
  • Re: Redirecting http:// to https:/
    ... Did you setup the custom error as a file ... :> URL that requires SSL, so IIS executes 403.4 custom error. ... :> I'm not certain how FireFox can make this situation work legitimately. ...
    (microsoft.public.inetserver.iis.security)
  • Re: iis 6 ssl redirect initial login encrypted?
    ... I had to enable anonymous auth on the file and virtual directory ... that contained the file and I had to disable SSL for the virtual directory ... I'm not sure how to do it for just my custom error page. ... I had to disable SSL on the main site so that the first time a user ...
    (microsoft.public.inetserver.iis.security)