Questions on Certificate server implementation

[ravula2000]

I have Certificate server setup on a website. I had given Portno as 80 and SSL No as 443. Iam able to access the application webappl1 in the website from Browser by giving

https://webappl1/login.asp

where login.asp is a page in the site. Iam getting a Security alert perfectly first time.

Now I have 2 questions.
1. If I access the site using

http://webapp1/login.asp

(with out https), it is allowing me to access the page.
I want to prevent this. What should I do so that the user can only go through the certificate server.

2. I used port nos 80 and 443 to this web application. If I want to use Certificate Server (SSL) for another
application what port nos should I use? Because I observered that the appl is working with Certificate server only with port no 80 and 443.

Please help me in these 2 issues.

Thanks
Srini

 

[Shift838]

remove port 80..

 

[ravula2000]

Hi Chris,
Can you please explain me what happens if I remove port 80.
Which port no should I give then..

Thanks
Srini

 

[Shift838]

You remove port 80 from the SSL site itself, not the server. by removing port 80 you stop all communication to the site via port 80. Or you can do what we do and leave port 80 open, but use it as a redirect to a secure site.

Such as:

site 1 : standard HTTP non secure site
site 2 : Secure site

Site 1 when hit will automatically redirect to site 2.

 

[ravula2000]

Chris,
I apologize for asking you again.
Iam not able to remove tcpportno 80 from the application. When SSLportno 443 is removed the browser is showing 'page cannot be displayed'.
Please explain me with an example like what TCPPort and SSLPort Nos to use for 2 sites to transfer from Nonsecure to Secure sites.
User should not try to open any web page through http.

Is there a way to do this using only one website?

Please help me..

Thanks for your time
Srini

 

[Shift838]

Example..

Use site one on Port 80 to redirect to Site 2 which uses SSL

When setting up the redirect within iis, point it to the actual

https://domainname.com

of your site

Install the certificate on the secure site, not the standard site.

There also should be a selection on the secure site within iis properties to force it only to accept https connections.

 

[ravula2000]

I got the redirection working.
I checked all the options for forcing my main site (using tcpport 80 and sllport433) to use only https connection.
I couldnt find it.. Can you please help me..

I really appreciate your help.

Thanks for your time.

Srini

 

[ravula2000]

I found out the option.. its working fine.
Thanks chris
Srini

 

[Shift838]

Glad it's working...