Re: Control SSL error page or detect capable SSL connection?

"Jan" <janoleolsen@xxxxxxxxxxx> wrote in message
news:1141681474.213629.145370@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Is it possible to somehow redirect users to a cutom page if their
browsers/firewall do not support SSL? Almost like a customized 404
page?

We'd like to offer SSL form submits by default, but show a special page
if SSL is not possible for the user.

Hi Jan,

From my knowledge with IIS I know this is possible from a server-side point
of view, though you have to cheat somewhat.

Within IIS Manager, locate the file/folder you require to be SSL enabled,
then go into file security - secure communications - edit and then tick
enable 'Require secured channel (SSL)'. Now viewing this page over a HTTP
connection will generate a 403 error message. Off the top of my head I
don't think you can do any kind of detection with this, as the error message
is generated from IIS before any pages are executed. By default this 403
error message is a typical one that Microsoft ship with IIS, plain white
background with the error:

"The page must be viewed over a secure channel
The page you are trying to access is secured with Secure Sockets Layer
(SSL).
blah blah blah"

Now, to redirect the user, simply create your own custom 403 error page that
contains redirect code (I prefer to use meta refresh as it's cleaner) and
using the 'Custom Errors' tab within the previous options in IIS, set the
default 403 error page to your new one.

Voila. Once people try and access your page using a non-secure connection
they'll get redirected to this new page.

This may not be useful to you if you intend to pass session variables and
the like, I really haven't tested it in much detail with PHP, but it may be
of some use to you.

Hope this helps,
Rich.


.

Relevant Pages

  • Removing Requirment for an SSL connection
    ... I have SBS 2000 running with IIS and Exchange and went through this ... We set the default website up to require an SSL connection because we didn't ... Office Scan) so of course this now required a secure connection to connect ...
    (microsoft.public.inetserver.iis)
  • Removing Requirement for SSL
    ... I have SBS 2000 running with IIS and Exchange and went through this ... We set the default website up to require an SSL connection because we didn't ... Office Scan) so of course this now required a secure connection to connect ...
    (microsoft.public.inetserver.iis.security)
  • Re: iis not transferring clients to ssl port
    ... individual ASP pages, inside of IIS metabase at a per-URL level, or inside ... because for all intents and purposes, the "transfer" from HTTP to HTTPS is ... Select the file to require SSL, choose right-click properties, and go to ... he wants the webmasters to be able to secure only the pages they want ...
    (microsoft.public.inetserver.iis.security)
  • unable to connect a secure site
    ... The page you are trying to access is secured with Secure ... Sockets Layer (SSL). ... Go to Microsoft Product Support Services and perform a ... Open IIS Help, which is accessible in IIS Manager ...
    (microsoft.public.inetserver.iis.security)
  • Re: SSL broken after Windows 2003 upgrade
    ... The svchost.exe you reference is "IIS". ... routes them to the appropriate w3wp.exe based on configuration from WAS ... WFetch can make both a normal SSL request as well as a Client-Certificate ...
    (microsoft.public.inetserver.iis)