Hi Sören

Kalle droped this solution to me:

In IIS add the certificate. Allow HTTP and HTTPS. Then you can add a property to the doctype like MustUseSSL or something like that. Then you can create a control "CheckSSL", add this at the front of your template. In the Control you can check if the Request was called with https or not. If not and the page has set MustUseSSL to true you can do a redirect to the same url with https.

I have tested this and it worked fine.

Thomas

---

• 2007/2008 MVP • www.thoehler.com • Bad Homburg, Germany

Thomas,

On a slighly different note you could possibly write http module that say checks if current page is umbraco log in page and redirect that via https so we have a more secure login for Umbraco?

Regards

Ismail

---

Level 2 certified. If it aint broke dont fix.

Hi all

I don't know if I can do this the next two days, but I will try to get all your ideas into a dll asap.

Thomas

---

• 2007/2008 MVP • www.thoehler.com • Bad Homburg, Germany

Hi all

made the solution I described in a dll with ascx. Download it here: thUmbracoHelpers

How to install: place the dll into the bin of your umbraco and place the ascx into the usercontrols dir.

Add a new macro, set it to the ascx (.Net User Control to "usercontrols/CheckSSL.ascx").

In your template add at the first line the created macro.

In your DocumentType add a new property with the Alias "MustUseSSL" and type = "True/False".

So this should do it. Remind this is made in .Net 2.0.

In the next time I will try to take a look into packages and the handler. But I don't know if I will get the time.

Thomas

---

• 2007/2008 MVP • www.thoehler.com • Bad Homburg, Germany

I've followed your instructions but encounter a problem getting the control to work. Would it be because of the fact that the site runs in .NET 1.1.4322?

/Søren

System.Web.HttpParseException: Parser Error: Could not load type 'thUmbracoHelpers.CheckSSL'. ---> System.Web.HttpException: Could not load type 'thUmbracoHelpers.CheckSSL'. at System.Web.UI.TemplateParser.GetType(String typeName, Boolean ignoreCase) at System.Web.UI.TemplateParser.ProcessMainDirective(IDictionary mainDirective) at System.Web.UI.TemplateControlParser.ProcessMainDirective(IDictionary mainDirective) at System.Web.UI.TemplateParser.ProcessDirective(String directiveName, IDictionary directive) at System.Web.UI.TemplateControlParser.ProcessDirective(String directiveName, IDictionary directive) at System.Web.UI.TemplateParser.ParseStringInternal(String text) at System.Web.UI.TemplateParser.ParseString(String text, String virtualPath, String basePhysicalDir) --- End of inner exception stack trace --- at System.Web.UI.TemplateParser.ParseString(String text, String virtualPath, String basePhysicalDir) at System.Web.UI.TemplateParser.ParseFile(String filename, String virtualPath) at System.Web.UI.TemplateParser.Parse() at System.Web.UI.TemplateParser.GetParserCacheItemThroughCompilation() at System.Web.UI.TemplateParser.GetParserCacheItemInternal(Boolean fCreateIfNotFound) at System.Web.UI.TemplateParser.GetParserCacheItemWithNewConfigPath() at System.Web.UI.TemplateParser.GetParserCacheItem() at System.Web.UI.TemplateControlParser.CompileAndGetParserCacheItem(String virtualPath, String inputFile, HttpContext context) at System.Web.UI.TemplateControlParser.GetCompiledType(String virtualPath, String inputFile, HttpContext context) at System.Web.UI.UserControlParser.GetCompiledUserControlType(String virtualPath, String inputFile, HttpContext context) at System.Web.UI.TemplateControl.LoadControl(String virtualPath) at umbraco.developer.assemblyBrowser.Page_Load(Object sender, EventArgs e)

---

Freelace webdesigner - umbraco, xhtml, xslt, css, c#

Hi Thomas.

I tried all day yesterday to get the Usercontrol to work, unfortunately without succeeding though.

The whole site is allowed to work with http and https in the IIS. That means the certificat is activated and the site is running smoothly with and without SSL. The problem is that the pages using the template with the CheckSSL-macro don't get redirected. Instead they are being forced only to be shown with https even if the MustUseSSL-property is set to false.

Am I missing something?

Regards,
Søren

---

Freelace webdesigner - umbraco, xhtml, xslt, css, c#

Hi Thomas.

I'm sorry to bother you again. Now the macro runs although the redirect address does result in an error:

No node found (https://www.xxxxxx.com/default.aspx?umbPage=/default.aspx&umbPage=/intranet/yyyyyy.aspx, '/root/node/node [@urlName = "default,"]/node [@urlName = "intranet"]/node [@urlName = "yyyyyy"]')

The second problem seems to be that the macro won't automatically get you back to the non-ssl part of the site as every link on the ssl-pages have https in front of the address and there is no "re-redirect". Please correct me if I'm missing anything or doing it wrong. I've put the macro as the first line of the main template.

/Søren

---

Freelace webdesigner - umbraco, xhtml, xslt, css, c#

Hi Thomas.

It's getting better and better each time. Only I can't get back to http when hitting a link to a non-ssl-encrypted part from within the ssl-encrypted part of the site. Is there a way of ensuring that the false-statement in the MustUseSSL-property will result in a "redirect" to http? Or is it another bug caused by converting from .NET 2.0 into 1.1?

I really appreciate all your efforts in helping me out.

/Soren

---

Freelace webdesigner - umbraco, xhtml, xslt, css, c#

Where has the zip file gone???

I found them:
EN: www.thoehler.com
DE: www.thoehler.com

Thomas

---

• 2007/2008 MVP • www.thoehler.com • Bad Homburg, Germany