Version ECF (4.1.2)

I am using following code for redirect from HTTP to HTTPS

<secureWebPages mode="On" encryptedUri="secure.mysite.com" unencryptedUri="www.mysite.com" maintainPath="True" warningBypassMode="AlwaysBypass">
       
        <directory path="/">
        </directory>
        <directory path="/Store/">
        </directory>
    </secureWebPages>

Now since I am using maintainPath = true, and when I try to navigate to www.mysite.com it takes me to secure.mysite.com/ult.aspx
I am not sure why it is changing the default.aspx to ult.aspx and I get an error on page 'page doesnt exist---which is true as there is no page called ult.aspx'

Same thing happens to when I go to www.mysite.com/store/index.aspx
it takes to secure.mysite.com/ore/index.aspx

Not sure why it is renaming the pages and directories.

Now if I change maintainPath="False".......it works file for root pages but doesnt redirect to secure links for pages in directory.........like /store/index.aspx
I would like to use maintainPath="True" without renaming the pages.
How can this be achieved?

 

Hi,

Which version of IIS are you using? And are you using any kind of http compression scheme? Have you tried doing an IISReset and attempt to load the pages again?

--Richly

I am using IIS 6. No Compression Scheme. I didnt try IISreset Clients do not want any downtime. Is there any other thing I shd look for?
Cause the issue is with MaintainPath = True only..looks like its rewriting the URLs.

Just to add, I did recycle the app pool for one of the site. Problem still persists

Hi Aniketh,

Here are some additional tips and tutorials that may be able to refer to help you - http://archives.mediachase.com/doku.php?id=ecf:41:tutorials:ssl

Appin Security Products, Services and Training
 Appin is a market leader in niche space of digital and information security products, services and training. Appin’s portfolio includes penetration testing suites like aMatrix, homeland security products like aMiner, aJailor, aDocument, aDetective and security monitoring softwares like aRadar, aSecure. The services include web and application security testing, compliances, vulnerability assessments, ethical hacking. Appin also has a portfolio of training programs which includes degrees, diplomas and certificate programs in Information Security and Ethical Hacking. For more info you may email Normal 0 false false false MicrosoftInternetExplorer4 /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:"Times New Roman"; mso-ansi-language:#0400; mso-fareast-language:#0400; mso-bidi-language:#0400;} international@appinonline.com

 

 

 -------------
  ethical hacking