Strange behavior using SSL and "FORMS" authentication.

[gmarquez]

Hello

I am using "FORMS" authentication, without SSL the behavior is normal, everythings working very well

When in IIS I cheking "Require SSL" (in Secure Communications property), I can't to do login, after introducing the credentials, I am redirected to login's page again, If I take the SSL's Check off in the ISS property, everythings will work very well again

NOTE: I have a valid certificate well installed

What is happening?, some suggest

Thanks in advance..

gmarquez

[gmarquez]

Hello

Searching similar questions (keyword= SSL, in the ASP.NET newsgroup), I found an argue about similar situation. Something gets my attention, they were discussing about creating self-signed certificate (like is my case)

>>>ITEM: SSL and ASP.NET, from 10/12/200

Is about a developer that he doesn't know like create a self-signed certificate.(This not apply for me)

>>>ITEM: ASP.NET and Secure Socket Layer, from 11/20/200

They recommend to review the following articles

INFO: Help Secure Forms Authentication by Using Secure Sockets Layer (SSL
[url]http://support.microsoft.com/default.aspx?scid=kb;en-us;81382[/url]

INFO: Building Secure ASP.NET Web Applications Guid
[url]http://support.microsoft.com/default.aspx?scid=kb;en-us;33024[/url]

I had used both of them, I have made all that suggests

I have everything well configured, but when I'm accessing to the secure page, the security alert show me the following

-(ok) The security certificate is from a trsuted certifying authority

-(ok) The security certificate is valid

-(!) The name on the security certificate is invalid or does not match then name of the site

Is possible that the last alert is my problem

Thanks in advance..

gmarque


----- gmarquez wrote: ----

Hello

I am using "FORMS" authentication, without SSL the behavior is normal, everythings working very well

When in IIS I cheking "Require SSL" (in Secure Communications property), I can't to do login, after introducing the credentials, I am redirected to login's page again, If I take the SSL's Check off in the ISS property, everythings will work very well again

NOTE: I have a valid certificate well installed

What is happening?, some suggest

Thanks in advance..

gmarquez

[Paul Glavich]

No, that would not be the reason you are having the
problem, otherwise you would not even get the login page
(as I assume you have SSL for the whole site, not just
some pages) which means the login page is also protected
by SSL. Try doing a bit of tracing and output the
credentials you receive to a trace file, to see what you
are getting.

HTH,
- Paul Glavich

>-----Original Message-----
>Hello,
>
>Searching similar questions (keyword= SSL, in the

ASP.NET newsgroup), I found an argue about similar
situation. Something gets my attention, they were
discussing about creating self-signed certificate (like
is my case):

>

>>>>ITEM: SSL and ASP.NET, from 10/12/2003

>Is about a developer that he doesn't know like create a

self-signed certificate.(This not apply for me).

>

>>>>ITEM: ASP.NET and Secure Socket Layer, from

11/20/2003

>They recommend to review the following articles:
>
>INFO: Help Secure Forms Authentication by Using Secure

Sockets Layer (SSL)

>[url]http://support.microsoft.com/default.aspx?scid=kb;en-[/url]

us;813829

>
>INFO: Building Secure ASP.NET Web Applications Guide
>[url]http://support.microsoft.com/default.aspx?scid=kb;en-[/url]

us;330246

>
>I had used both of them, I have made all that suggests.
>
>I have everything well configured, but when I'm

accessing to the secure page, the security alert show me
the following:

>
>-(ok) The security certificate is from a trsuted

certifying authority.

>
>-(ok) The security certificate is valid.
>
>-(!) The name on the security certificate is invalid or

does not match then name of the site.

>
>Is possible that the last alert is my problem?
>
>Thanks in advance...
>
>gmarquez
>
>
> ----- gmarquez wrote: -----
>
> Hello,
>
> I am using "FORMS" authentication, without SSL the

behavior is normal, everythings working very well.

>
> When in IIS I cheking "Require SSL" (in Secure

Communications property), I can't to do login, after
introducing the credentials, I am redirected to login's
page again, If I take the SSL's Check off in the ISS
property, everythings will work very well again.

>
> NOTE: I have a valid certificate well installed.
>
> What is happening?, some suggest?
>
> Thanks in advance...
>
> gmarquez
>.
>