using ssl certificate in asp

[myasp]

Hi all,

I want to build an online shop with asp. Could you give me any idea on using ssl? Shall I purchase the ssl certificate first then set the key in the server? Do I need to do anything in the asp code? Or the "http" is the only thing needs to be changed?(change to "https" ?)

Any advice would be appreciated.

[sashi]

Hi there,

pls refer to the link attached.. take care my fren..

http://www.thescripts.com/forum/thread52526.html

[myasp]

Hi Sashi, thanks for the link and I really appreciate it.
However, my case is a little bit different from John's. The details of my customer include some sensitive information and they will be saved in the database on my server, I guess I have to install the ssl certificate to protect those details when my customer submit the form. The problem is I have no idea how to apply ssl/ssl encryption in asp file. Is there any place that I can learn it? Or someone can explain it?

[sashi]

Hi there,

check out the attached links below.. hope it helps you to get started with SSL.. take care..

http://www.devguru.com/features/tuto...entication.asp
http://www.devhood.com/tutorials/tut...tutorial_id=85
http://jeays.net/asp.htm

[menon]

Hi Guys!

Please Refer this link, you will find more about Forcing http:// to https://

http://www.hotscripts.com/Detailed/57478.html


best regards,
Kalipurayath Sanal Menon

[sashi]

Hi Menon,

thanks for sharing the information with the rest.. good job.. keep it up buddy.. :)

[matary]

This is great! The only modification I would make is to add the query string in one of two ways:

<%
   If Request.ServerVariables("SERVER_PORT")=80 Then
      Dim strSecureURL
      strSecureURL = "https://"
      strSecureURL = strSecureURL & Request.ServerVariables("SERVER_NAME")
      strSecureURL = strSecureURL & Request.ServerVariables("URL")
      strSecureURL = strSecureURL & "?" & Request.ServerVariables("QUERY_STRING")
      Response.Redirect strSecureURL
   End If
%>

or

<%
   If Request.ServerVariables("SERVER_PORT")=80 Then
      Dim strSecureURL
      strSecureURL = "https://"
      strSecureURL = strSecureURL & Request.ServerVariables("SERVER_NAME")
      strSecureURL = strSecureURL & Request.ServerVariables("HTTP_X_REWRITE_URL")
      Response.Redirect strSecureURL
   End If
%>

and as suggested include this file on a page to force it to use SSL.

BTW, when I wrote a similar script I used HTTPS server variable which returns on or off. Same final result as checking the port for 80 vs. 443.


To see all of the server variables use the following:

for each x in Request.ServerVariables
  response.write("<b>" & x & ":</b><br /><pre>" & Request.ServerVariables(x) & "</pre><br /><br />")
next

Happy coding:
Matary

[splendid9]

If Request.ServerVariables("SERVER_PORT")=8080 Then
Dim strSecureURL
strSecureURL = "https://"
strSecureURL = strSecureURL & Request.ServerVariables("SERVER_NAME")
strSecureURL = strSecureURL & Request.ServerVariables("URL")
strSecureURL = strSecureURL & "?" & Request.ServerVariables("QUERY_STRING")
Response.Redirect strSecureURL

End If

The code is not working.. i am getting page cud not b found can anyvbody pl help

[DrBunchman]

Hi there,

Comment out your response.redirect and add a response.write. You'll be able to see what the url you are trying to navigate to is and hopefully see what is wrong with it.

Hope this helps,

Dr B