Hi,

With Chrome aggressively flagging non-https sites and now with the most recent build of Firefox doing the same thing, I need to take whatever steps are necessary to convert my managed DNN sites to https (SSL) sites. Most of the sites are running on Godaddy shared servers, which is somewhat fortunate in that Godaddy doesn't require a dedicated IP address for their SSL certificates and they allow SSL on shared accounts.

So, acquiring the certificate(s) and applying the cert to the hosting account should be easy enough.

But, what will I need to do to the DNN sites themselves?

Thanks for any suggestions offered :-)

Hi Michael,

I had actually read that page before posting, but the first line "This a how to write up that explains how to make sure that all authenticated sessions (anything that happens after a user is logged on) are served using an SSL connection (using the HTTPS protocol)" had thrown me a little. It seems to indicate that only after someone has logged in would they be seeing https pages.

Does that mean that site visitors would continue to see non-https pages unless they log in? My goal is to have all users see only https pages regardless of login status.

Thanks :-)

I would not bather with SSL settings in DNN itself. Instead I would create a URLRewriter rule and add this to your web.config:

<code><rewrite><br />

<rules><br />

<rule name="HTTP to HTTPS redirect" enabled="true" stopprocessing="true"><br />

<match url="(.*)"><br />

<conditions><br />

<add input="{HTTPS}" pattern="off" ignorecase="true"><br />

</add></conditions><br />

<action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirecttype="Permanent"><br />

</action></match></rule><br />

</rules><br />

</rewrite></code>

---

www.server-essentials.com is a community for IT Consultants and Business Owners who, themselves, take care of the IT infrastructure and Employees who do that little extra in the company to keep things running. Our forum is for discussing all things ‘IT’ and more. Our documentation is top notch and written by and for the community. Join now at https://www.server-essentials.com/secure-registration