Forcing SSL with custom error messages

I followed David Wang's instructions but for some reason I can not get
past the redirect... It does fire from HTTP to HTTPS without any
trouble ... but it just sits on the error page ...

<%
if request.servervariables("server_port") = 80 then
dim sslurl : sslurl = "https://";
sslurl = sslurl & request.servervariables("server_name")
sslurl = sslurl & request.servervariables("url")
response.redirect sslurl
end if
%>

.

Relevant Pages

  • RE: Encrypted or Not Encrypted
    ... Indeed this is a manual redirect initiated by the user instead of a HTTP ... IMHO you need to make sure that you POST credentials via HTTPs. ... A possible test to make sure you establish a secure SSL connection before ... By analyzing the HTTP requests and responses you can also look at the HTTP ...
    (Security-Basics)
  • Re: Redirect https to http Exchange 2007
    ... I took off require SSL on the /OWA dir and i can get to ... it by http and https, but the redirect to https isnt working if i force ssl ... /OWA vdir but the redirect to SSL isnt working, ...
    (microsoft.public.exchange.admin)
  • Re: HTTP vs HTTPS for OWA
    ... In IIS administrator you can open the properties of the Default Web Site, add a custom error page for 403.4 with an absolute redirect to URL http://www.company.com. ... You can also create an HTTP redirect of the Default Web Site to /owa. ... > changed how OWA is reacting externally. ...
    (microsoft.public.exchange.connectivity)
  • Re: Danger to having Port 80 open on hardware firewall
    ... Seems to me that if you don't port forward 80, then you are not going to get ... the ssl redirection <http <> https>. ... >> requests never go any further. ... I usually redirect ...
    (microsoft.public.windows.server.sbs)
  • Re: Form Authentication (redirect to https)
    ... If I change the entry in the web.config to the following ... I get the windows login prompt. ... that if the user gets to the login page via http, ... the site that works with the redirect and one that doesn't. ...
    (microsoft.public.dotnet.framework.aspnet.security)