Welcome! Log In Create A New Profile

Advanced

[WB19] Advice on SSL

Posted by Piet van Zanten 
Piet van Zanten
[WB19] Advice on SSL
October 17, 2014 09:35AM
Hi,

Does anyone have experience using HTTPS with Webdev?
Any tips and suggestions for a good and not too expensive certificate provider are appreciated.

Regards,
Piet
Michael Drechsel
Re: [WB19] Advice on SSL
October 17, 2014 10:05AM
Hi Piet,

yes, we use certificates from www.godaddy.com
Ericus
Re: [WB19] Advice on SSL
October 17, 2014 11:32AM
Hi Piet

I also use GoDaddy certificate. But they have various ones and if the certificate is issued to an organisation I can tell you, every year I have to jump through hoops to get it renewed. But that is just in my case because, believe it or not, my business don't have land lines, so therefore no phonebook listing in which case you have to get a letter from an auditor, and they must have a phonebook listing etc. etc.

But otherwise everything works perfectly.
Peter Zhou
Re: [WB19] Advice on SSL
November 03, 2014 07:01AM
Hi,

Other than certificate, any "special requirement" on the programming aspect ?

Regards,

Peter Zhou
Piet van Zanten
Re: [WB19] Advice on SSL
November 03, 2014 10:02AM
Hi Peter,

I got a Comodo certificate from a Dutch company Xolphin.
Installation was easy following the instructions on their site.

Only problem is that I have not found a way yet to switch to HTTPS automatically, because dynamic WB sites don't work with url rewrite.

Regards,
Piet
Paulo Oliveira
Re: [WB19] Advice on SSL
November 03, 2014 10:37AM
did you try the SSLActive function?

[doc.windev.com]
Piet van Zanten
Re: [WB19] Advice on SSL
November 03, 2014 11:02AM
Hi Paolo,

I tried it already, but it's browser code and can only be placed in a link or button.
There's no way to execute this code on startup. (executeprocess does not work)
I also tried a simple html page with the javascript "location" function to redirect to https, but that didn't do it either.

Regards,
Piet
Paulo Oliveira
Re: [WB19] Advice on SSL
November 03, 2014 01:02PM
I don't have WB19 but inWB18 SSLActive(True) works.

My first page is a blank page used to choose if it needs SSL, authentication and so based on several parameters a have in the DB.

If i need SSL on the onload (browser code) of my first page i use ExecuteProcess(BT_SSL,trtClick) and in the BT_SSL onclick (browser code) i use SSLActive(True) and on the server code PageDisplay(Page_Login)
Piet van Zanten
Re: [WB19] Advice on SSL
November 04, 2014 10:47AM
Hi Paolo,

Thanks for your input.
It took me a while to install a self signed certificate on my dev machine, but it works now as you indicated.
I have a dummy startup page that goes directly into ssl without any user action.

Regards,
Piet
Peter Zhou
Re: [WB19] Advice on SSL
November 20, 2014 03:02PM
Hi,

Will user enter "http:" on the same link as "https:" still work ?
If yes, is there anyway to prevent the user accessing the site using "http:" ?

Regards,

Peter Zhou
Piet van Zanten
Re: [WB19] Advice on SSL
November 20, 2014 03:23PM
Hi Peter,

I guess if it's a dynamic non-awp website then the homepage is the only way to enter and it redirects to https.
So I don't see a way out of https here.
I'm going to look for a way to do this for individual AWP pages too.

Regards,
Piet
Paulo Oliveira
Re: [WB19] Advice on SSL
November 20, 2014 04:39PM
If you only need to use HTTPS the easy way is to configure the IIS (APACHE or some other web server used) to listen only in the port 443, just remove port 80 from the configuration, if someone try to connect with HTTP IIS will trigger one error.

If you need to do it by code check the SysEnvironment function to check if HTTPS was used and do what you want.
[doc.windev.com]
KenKnight
Re: [WB19] Advice on SSL
November 27, 2014 12:52AM
Hi all,

In IIS 7.x you can install URL Rewrite and then select the SSL module and place a checkmark in the "Require SSL" option.

This will force non-ssl connections to flip over to SSL based.

Cheers!
Ken
Author:

Your Email:


Subject:


Spam prevention:
Please, enter the code that you see below in the input field. This is for blocking bots that try to post this form automatically. If the code is hard to read, then just try to guess it right. If you enter the wrong code, a new image is created and you get another chance to enter it right.
Message: