Stack Overflow
Stack Overflow

Questions tagged [requiressl]

16 questions
12
votes
2 answers

How does "Require SSL" affect ASP.NET MVC application lifecycle?

I have an application that taps into BeginRequest and EndRequest to set up and tear down NHibernate sessions like this: BeginRequest += delegate { CurrentSessionContext.Bind(SessionFactory.OpenSession()); }; EndRequest += delegate { var…
Ragesh
  • 2,800
  • 2
  • 25
  • 36
8
votes
3 answers

How do I do the OPPOSITE of [RequireHttps(Redirect=true)] in ASP.NET MVC

I know the easy way to get to an SSL page in ASP.NET MVC - via the [RequireSSL] attribute but I'm a little confused to the best way to do the opposite. I have many links on my site in a header bar and most of those links don't require SSL and I…
Simon_Weaver
  • 140,023
  • 84
  • 646
  • 689
5
votes
2 answers

Sitecore with requireSSL for cookies

Our Sitecore 6.6.0 (rev. 120918) based website can work over http as well as https. We also have a security requirement of making all the cookies to transfer over SSL regardless of whether the website is accessed via http. We have achieved this…
ravinsp
  • 4,150
  • 2
  • 32
  • 43
4
votes
3 answers

How to step out from https to http mode in asp.net mvc

I have made my Login page as Https enabled by adding the attribute [RequireSSL] on controller Action and it works fine. But after successful login it remains in https environment, however the page is non https page. Can anybody give me workaround…
user189928
3
votes
2 answers

Session Identifier Not Updated in Asp.NET web application

Recently we had a security scan(IBM AppScan) in one of our ASP.NET Application where it reported a Medium vulnerability as follows Session Identifier Not Updated Severity: Medium Risk: It is possible to steal or manipulate customer session and…
Emkay
  • 91
  • 1
  • 5
3
votes
1 answer

Why is the default for FormsAuthentication's requireSSL property false!

Note: This is NOT an ASP.NET MVC question related to the [RequireSSL] attribute. Thats completely different - just has the same name. ASP.NET Forms authentication has the RequireSSL property which requires that the auth cookie for ASP.NET…
Simon_Weaver
  • 140,023
  • 84
  • 646
  • 689
2
votes
1 answer

Web Farm Framework and MVC 3: How to require Https on an Action Method?

I know you can do this: #if !DEBUG [RequireHttps] //apply to this action only #endif What if you are using Web Farm Framework where "the Controller" server receives an outside SSL 443 request, decrypts it, then forwards it to the Primary /…
Zachary Scott
  • 20,968
  • 35
  • 123
  • 205
2
votes
1 answer

Should asp.net_sessionid appear on http request when requireSSL is true

Afternoon Folks, I was wondering if anyone could give me a heads up with regards to this problem that I'm having. I'm not positive on what I should be seeing I suppose is the main issue that I'm having. I have changed the web.config to use the…
Ruaghain
  • 135
  • 1
  • 14
2
votes
2 answers

asp.net use requireSSL and still be able to check if the user is authenticated on Non-SSL pages

I have a webapplication (asp.net 3.5) with mixed SSL. All account related pages are delivered over SSL. Mostly all other pages are delivered over non-ssl. To automatically switch between HTTPS and HTTP I use this component. Lately there was a news…
JonHendrix
  • 933
  • 15
  • 28
2
votes
2 answers

Why doesn't this load into https?

In asp.net mvc 3 I have a site which has an ssl certificate, and runs just fine in https. The only page exposed is the logon page. For whatever reason, it does not load in https. Here is my relevant code (will post more on request if I left…
Travis J
  • 81,153
  • 41
  • 202
  • 273
1
vote
1 answer

Error when setting require SSL=true Asp.net

I am working in an Asp.net application with forms authentication. On my web.config I had set the requiressl property=true. I have been working on development without any problem but when I deploy it on my test environment I got the next error: The…
José Pelayo
  • 11
  • 1
  • 2
1
vote
2 answers

Windows Azure ASP.NET MVC Role behaves strangely when redirecting from HTTP to HTTPS

Subj. I've got an ASP.NET 2 MVC Worker Role Application, that does not differ much from the default template. When attempting redirect from HTTP to HTTPS (this happens when we access constroller secured by the usual RequireSSL attribute…
Rinat Abdullin
  • 23,036
  • 8
  • 57
  • 80
1
vote
1 answer

Cannot login if requiressl is set to true

I have a live web site in IIS 7.5. I can login to my site correctly with http protocol till I add this line in Web.config: httpCookies httpOnlyCookies="true" requireSSL="true" All configuration for SSL is done but I cannot login anymore with…
Anh Hoang
  • 2,242
  • 3
  • 22
  • 23
1
vote
0 answers

IIS 7.5 setting SSL to ignored equal to accept any certificate

In IIS7.5, for my web application, if I set the "Require SSL" checked and select Client certificate to "Ignore", is it equal to accepting any SSL certificate and authenticating request from client with ANY certificate?
Ankit
  • 6,388
  • 8
  • 54
  • 79
0
votes
1 answer

How do you get RequireSSL in NodeJS on an Azure Website?

So a little background first: A NodeJS server running in an Azure Website will automatically have all HTTPS requests directed to the http endpoint. This allows the following code to work for both HTTP and HTTPS var http = require('http'); var…
jt000
  • 3,196
  • 1
  • 18
  • 36
1
2