It usually happens when the certificate does not match with the host name. The solution would be to contact the host and ask it to fix its certificate. Otherwise you can turn off cURL’s verification of the certificate, use the -k (or –insecure) option. Please note that as the option said, it is insecure. You … Read more
In the Startup.cs, remove the middleware app.UseHttpsRedirection();
jww is right — you’re referencing the wrong intermediate certificate. As you have been issued with a SHA256 certificate, you will need the SHA256 intermediate. You can grab it from here: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt
Redirects are followed only if they use the same protocol. (See the followRedirect() method in the source.) There is no way to disable this check. Even though we know it mirrors HTTP, from the HTTP protocol point of view, HTTPS is just some other, completely different, unknown protocol. It would be unsafe to follow the … Read more
It is safe. That’s how the entire web works. All passwords in forms are always sent in plain text, so its up to HTTPS to secure it.
To allow https wrapper: the php_openssl extension must exist and be enabled allow_url_fopen must be set to on In the php.ini file you should add this lines if not exists: extension=php_openssl.dll allow_url_fopen = On
To fix this, you need to supply an extra parameter to openssl when you’re creating the cert, basically -sha256 -extfile v3.ext where v3.ext is a file like so, with %%DOMAIN%% replaced with the same name you use as your Common Name. More info here and over here. Note that typically you’d set the Common Name … Read more
Try something like this (should work for Apache and IIS): if (empty($_SERVER[‘HTTPS’]) || $_SERVER[‘HTTPS’] === “off”) { $location = ‘https://’ . $_SERVER[‘HTTP_HOST’] . $_SERVER[‘REQUEST_URI’]; header(‘HTTP/1.1 301 Moved Permanently’); header(‘Location: ‘ . $location); exit; }
This won’t help if you run Release builds on your development workstation, but conditional compilation could do the job… #if !DEBUG [RequireHttps] //apply to all actions in controller #endif public class SomeController { //… or … #if !DEBUG [RequireHttps] //apply to this action only #endif public ActionResult SomeAction() { } } Update In Visual Basic, … Read more
There is no way to differentiate it from newest Web Browsers. W3C Specification: The steps below describe what user agents must do for a simple cross-origin request: Apply the make a request steps and observe the request rules below while making the request. If the manual redirect flag is unset and the response has an … Read more