Redirecting from http to https in IIS7

re: Redirecting from http to https in IIS7

sukesh — Sun, 11 Oct 2009 02:35:08 GMT

This was a sample code to show how easy it is to do a redirection as IIS7 custom module.

Since now you have url rewrite component available, I would suggest to go that route.

A sample rule is given here...

www.iis-aid.com/.../redirect_http_to_https_iis_7

re: Redirecting from http to https in IIS7

Leshchinsky — Tue, 17 Jun 2008 17:57:14 GMT

Hi, I have the same problem. I'm using IIS 6.0. After moving from HTTP to HTTPs session have been dropped. Help me to resolve this problem. Thanks in advance.

Vladimir

re: Redirecting from http to https in IIS7

Ian Hudson — Tue, 04 Mar 2008 18:09:27 GMT

I agree with you Sukesh, it's not common for customer to type in http://domain:443 I think it would be easier actually to tell customers to just type in https://domain or https://subdomain.domain then adding the 443 port to the end there. But it's a good start.

re: Redirecting from http to https in IIS7

sukesh — Tue, 10 Oct 2006 05:12:15 GMT

Colin,

Your implementation of SSL checking looks fool proof.

But just another point, although 443 is a well defined port, you can host non-SSL site on 443 as well. So your mention of both url to be same is true in an ideal world only.

Just FYI, from 3500+ customer I have worked with (in last 3yrs), haven't seen anyone using http://domain:443 for ssl. Secondly I also wanted to make my sample simple to understand.

Thanks for your comment!

re: Redirecting from http to https in IIS7

colinbo — Sun, 03 Sep 2006 18:44:58 GMT

Perhaps this is just picky but I've found that relying on the URL isn't always accurate. For example, I've (rarely) seen some people do http://domain.com:443 which is the same as https://domain.com. I've opted for the following server variable in the past. Is this variable emitted by IIS7?

private static bool IsRequestSecure(HttpRequest request)

{

if ((String.Compare(request.ServerVariables["HTTPS"], "on", true, CultureInfo.InvariantCulture) == 0) |

(request.IsSecureConnection))

return true;

else

return false;

}