Diese Seite mit anderen teilen ...

Informationen zum Thema:
Forum:
WinDev Forum
Beiträge im Thema:
13
Erster Beitrag:
vor 3 Jahren, 8 Monaten
Letzter Beitrag:
vor 3 Jahren, 6 Monaten
Beteiligte Autoren:
Piet van Zanten, Paulo Oliveira, Peter Zhou, KenKnight, Ericus, Michael Drechsel

[WB19] Advice on SSL

Startbeitrag von Piet van Zanten am 17.10.2014 07:35

Hi,

Does anyone have experience using HTTPS with Webdev?
Any tips and suggestions for a good and not too expensive certificate provider are appreciated.

Regards,
Piet

Antworten:

Hi Piet,

yes, we use certificates from www.godaddy.com

von Michael Drechsel - am 17.10.2014 08:05
Hi Piet

I also use GoDaddy certificate. But they have various ones and if the certificate is issued to an organisation I can tell you, every year I have to jump through hoops to get it renewed. But that is just in my case because, believe it or not, my business don't have land lines, so therefore no phonebook listing in which case you have to get a letter from an auditor, and they must have a phonebook listing etc. etc.

But otherwise everything works perfectly.

von Ericus - am 17.10.2014 09:32
Hi,

Other than certificate, any "special requirement" on the programming aspect ?

Regards,

Peter Zhou

von Peter Zhou - am 03.11.2014 06:01
Hi Peter,

I got a Comodo certificate from a Dutch company Xolphin.
Installation was easy following the instructions on their site.

Only problem is that I have not found a way yet to switch to HTTPS automatically, because dynamic WB sites don't work with url rewrite.

Regards,
Piet

von Piet van Zanten - am 03.11.2014 09:02
did you try the SSLActive function?

http://doc.windev.com/en-US/?3012011

von Paulo Oliveira - am 03.11.2014 09:37
Hi Paolo,

I tried it already, but it's browser code and can only be placed in a link or button.
There's no way to execute this code on startup. (executeprocess does not work)
I also tried a simple html page with the javascript "location" function to redirect to https, but that didn't do it either.

Regards,
Piet

von Piet van Zanten - am 03.11.2014 10:02
I don't have WB19 but inWB18 SSLActive(True) works.

My first page is a blank page used to choose if it needs SSL, authentication and so based on several parameters a have in the DB.

If i need SSL on the onload (browser code) of my first page i use ExecuteProcess(BT_SSL,trtClick) and in the BT_SSL onclick (browser code) i use SSLActive(True) and on the server code PageDisplay(Page_Login)

von Paulo Oliveira - am 03.11.2014 12:02
Hi Paolo,

Thanks for your input.
It took me a while to install a self signed certificate on my dev machine, but it works now as you indicated.
I have a dummy startup page that goes directly into ssl without any user action.

Regards,
Piet

von Piet van Zanten - am 04.11.2014 09:47
Hi,

Will user enter "http:" on the same link as "https:" still work ?
If yes, is there anyway to prevent the user accessing the site using "http:" ?

Regards,

Peter Zhou

von Peter Zhou - am 20.11.2014 14:02
Hi Peter,

I guess if it's a dynamic non-awp website then the homepage is the only way to enter and it redirects to https.
So I don't see a way out of https here.
I'm going to look for a way to do this for individual AWP pages too.

Regards,
Piet

von Piet van Zanten - am 20.11.2014 14:23
If you only need to use HTTPS the easy way is to configure the IIS (APACHE or some other web server used) to listen only in the port 443, just remove port 80 from the configuration, if someone try to connect with HTTP IIS will trigger one error.

If you need to do it by code check the SysEnvironment function to check if HTTPS was used and do what you want.
http://doc.windev.com/en-US/?3073014

von Paulo Oliveira - am 20.11.2014 15:39
Hi all,

In IIS 7.x you can install URL Rewrite and then select the SSL module and place a checkmark in the "Require SSL" option.

This will force non-ssl connections to flip over to SSL based.

Cheers!
Ken

von KenKnight - am 26.11.2014 23:52
Zur Information:
MySnip.de hat keinen Einfluss auf die Inhalte der Beiträge. Bitte kontaktieren Sie den Administrator des Forums bei Problemen oder Löschforderungen über die Kontaktseite.
Falls die Kontaktaufnahme mit dem Administrator des Forums fehlschlägt, kontaktieren Sie uns bitte über die in unserem Impressum angegebenen Daten.