iis7,https,asp.netmvc的相关问题
view SSL binding configuration stored in HTTP.sys:
netsh http show sslcert
在某一站点上启用SSL:
C:\Windows\system32\inetsrv>appcmd set config "Default Web Site" -commitPath:APPHOST -section:access -sslFlags:[Ssl | SslNegotiateCert | SslRequireCert | Ssl128 | None]
-sslFlags的值要注意大小写
然后iis服务器里设置证书,再给站点做https的bindings,SSL Certificate选刚才建立的证书。
asp.net mvc 使用 SSL / htt
首先注意到是,https在没有通过验证时,http的status code要返回:
403.4 - SSL required. 403.5 - SSL 128 required
Disable the Require secure channel option, or use HTTPS instead of HTTP to access the page. If you receive this error for a Web site that does not have a certificate installed, click the article number below to view the article in the Microsoft Knowledge Base:
IIS HTTP Status Code
我们可以创建Filter来完成验证工作:
}
配合做一个SSL未验证的ActionResult:
}
如果想在访问http://url/的时候跳转到https://url/可以这样继承一个:
1
rotected override ActionResult BuildActionResult(HttpContextBase httpContext)
2
}