We enabled the "Use SSL Connection" check box on the Forms Server configuration page. I can now browse to Forms using https, but I also noticed I can still browse to it using http. I would have expected Forms to redirect all http traffic to it's https equivalent. I think it would be great if that was the default behavior when the "Use SSL Connection" check box is checked.
Question
Question
Replies
SSL connections between the Laserfiche Forms web server and the user's browser are handled by IIS. We have a write up on SSL in the Forms help files, and this article on the MSDN blog describes how to set up an HTTP to HTTPS redirect in IIS 7 and greater. It looks like the process described in the article should take care of it.
Zachary, thank you for the information on how to do the redirect using IIS. I believe that it would more user friendly to have the Forms application handle it though. I run several .net based ecommerce sites that have this type of functionality. The moment you select to use an SSL certificate, it enables code that automatically redirects the visitor to the https version of the page instead.
For those of you wanting to implement a redirect to https automatically, you can use the code below. Please note that the URL Rewrite module for IIS must be installed in order for this to work (preferably v2).
<?xml version="1.0" encoding="UTF-8"?> <configuration> <system.webServer> <rewrite> <rules> <clear /> <rule name="Redirect to https" stopProcessing="true"> <match url="(.*)" /> <conditions> <add input="{HTTPS}" pattern="off" ignoreCase="true" /> </conditions> <action type="Redirect" url="https://{HTTP_HOST}{REQUEST_URI}" redirectType="Permanent" appendQueryString="false" /> </rule> </rules> </rewrite> </system.webServer> </configuration>
Just another note on this, this feature was implemented in Web Access 10. It would be nice if the same feature was added to Forms as well.
Any word on when this might implemented? It is already available in the Web Client.