blocks|key|752219|text|我通常从基类中的OnPreInit调用以下代码，我的所有页面都继承自该基类。当然，你可以在你现在不想做的每一个page...but中都这样做，对吗？|type|unstyled|depth|inlineStyleRanges|entityRanges|data|752220|请注意，我为每个页面提供了两个属性，以便可以为每个页面(RequiresSSL)指定SSL要求，同时还可以根据需要覆盖和重定向检查(使用IgnoreRequiresSSL，这对于您重写的错误页面等不知道是否会加密的页面很有帮助)，但当然，您可以删除这些属性以进行简单的设置。|752221|++++protected+override+void+OnPreInit(EventArgs+e)
++++{
++++++++base.OnPreInit(e);

++++++++if+(!IsPostBack)
++++++++++++RedirectAccordingToRequiresSSL();

++++++++...
++++}

++++///+<summary>
++++///+Redirect+if+necessary+to+ssl+or+non-ssl+enabled+URL+dependant+on+RequiresSSL+property+setting.
++++///+</summary>
++++private+void+RedirectAccordingToRequiresSSL()
++++{
++++++++if+(IgnoreRequiresSSL)+return;

++++++++if+(RequiresSSL)
++++++++{
++++++++++++if+(!Request.IsSecureConnection)+//+Need+to+redirect+to+https
++++++++++++++++RedirectAccordingToRequiresSSL(Uri.UriSchemeHttps);
++++++++}
++++++++else+if+(Request.IsSecureConnection)
++++++++{
++++++++++++RedirectAccordingToRequiresSSL(Uri.UriSchemeHttp);
++++++++}

++++++++//+Otherwise+don't+need+to+do+any+redirecting+as+already+using+the+correct+scheme
++++}

++++///+<summary>
++++///+Redirect+as+requested+to+specified+scheme
++++///+</summary>
++++///+<param+name="scheme"></param>
++++private+void+RedirectAccordingToRequiresSSL(string+scheme)
++++{
++++++++var+url+=+scheme+%2B+Uri.SchemeDelimiter+%2B+Request.Url.Authority+%2B+Request.Url.PathAndQuery;
++++++++Response.Redirect(url,+false);
++++}|code-block|syntax|javascript|752222|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|M|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

I usually call the following from the OnPreInit in a base class that all my pages inherit from. Of course, you could just do this in every page...but you wouldn't want to do that now would you?

Note that I've got two properties for each page so that I can specify the SSL requirement for each page (RequiresSSL) while I can also override and redirect check if I want (with IgnoreRequiresSSL, which is helpful for pages like error pages that you rewrite to and don't know whether they'll be encrypted or not), but of course, you can remove these for simple setups.

<pre><code> protected override void OnPreInit(EventArgs e)
 {
 base.OnPreInit(e);

 if (!IsPostBack)
 RedirectAccordingToRequiresSSL();

 ...
 }

 /// &lt;summary&gt;
 /// Redirect if necessary to ssl or non-ssl enabled URL dependant on RequiresSSL property setting.
 /// &lt;/summary&gt;
 private void RedirectAccordingToRequiresSSL()
 {
 if (IgnoreRequiresSSL) return;

 if (RequiresSSL)
 {
 if (!Request.IsSecureConnection) // Need to redirect to https
 RedirectAccordingToRequiresSSL(Uri.UriSchemeHttps);
 }
 else if (Request.IsSecureConnection)
 {
 RedirectAccordingToRequiresSSL(Uri.UriSchemeHttp);
 }

 // Otherwise don't need to do any redirecting as already using the correct scheme
 }

 /// &lt;summary&gt;
 /// Redirect as requested to specified scheme
 /// &lt;/summary&gt;
 /// &lt;param name="scheme"&gt;&lt;/param&gt;
 private void RedirectAccordingToRequiresSSL(string scheme)
 {
 var url = scheme + Uri.SchemeDelimiter + Request.Url.Authority + Request.Url.PathAndQuery;
 Response.Redirect(url, false);
 }
</code></pre>

blocks|key|967827|text|这是我的解决方案：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|967828|//+Force+HTTPS+connection
if+(!Request.IsSecureConnection)
{
++++var+uri+=+new+Uri(Request.Url.ToString());
++++var+redirectUrl+=+Settings.CanonicalDomain+%2B+uri.PathAndQuery;
++++Response.Status+=+"301+Moved+Permanently";
++++Response.AddHeader("Location",+redirectUrl);
++++Response.End();
}|code-block|syntax|javascript|967829|其中Settings.CanonicalDomain是您的HTTPS主机名。它301重定向，这在某些情况下可能是正确的响应。|offset|length|style|CODE|967830|entityMap^0|0|0|2|O|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@$I|R|J|S|K|L]]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

Here's my solution:

<pre><code>// Force HTTPS connection
if (!Request.IsSecureConnection)
{
 var uri = new Uri(Request.Url.ToString());
 var redirectUrl = Settings.CanonicalDomain + uri.PathAndQuery;
 Response.Status = "301 Moved Permanently";
 Response.AddHeader("Location", redirectUrl);
 Response.End();
}
</code></pre>

Where <code>Settings.CanonicalDomain</code> is your HTTPS hostname. It 301 redirects which may be the proper response in some cases.

blocks|key|752377|text|在我的开发环境中，我喜欢有一个单独的发布目录，其中IIS安装了一个自签名证书，这与我的代码目录不同，我没有证书，我直接在Visual+Studio中进行调试。在这种情况下，!Request.IsLocal并不理想，因为它不能在您的开发环境中的任何地方工作，甚至不能在包含证书的IIS目录中工作。我更喜欢这样：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|752378|if+(!IsPostBack+&&+!HttpContext.Current.IsDebuggingEnabled)+
{
++++//+do+http->https+and+https->http+redirection+here
}|code-block|syntax|javascript|752379|HttpContext.Current.IsDebuggingEnabled基于web.config中的编译debug="true/false“的值。我在我的代码目录中将其设置为true，当我需要在本地测试http和https重定向时，在我的发布目录中将其设置为false。|752380|我添加IsPostBack只是为了在不需要时跳过额外的ssl检查，从而(稍微)提高效率。|752381|entityMap^0|2E|G|0|0|0|12|0|3|A|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|T|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|U|8|@$9|V|A|W|B|C]]|D|@]|E|$]]|$1|M|3|N|5|6|7|X|8|@$9|Y|A|Z|B|C]]|D|@]|E|$]]|$1|O|3|-4|5|6|7|10|8|@]|D|@]|E|$]]]|P|$]]

On my development environment, I like to have a separate publish directory with IIS installed with a self signed cert, which is different form my code directory without a cert that I debug directly inside of Visual Studio. In this scenario <code>!Request.IsLocal</code> isn't ideal because it doesn't work anywhere on your development environment, even in the IIS directory with the cert. I prefer this:

<pre><code>if (!IsPostBack &amp;&amp; !HttpContext.Current.IsDebuggingEnabled) 
{
 // do http-&gt;https and https-&gt;http redirection here
}
</code></pre>

<code>HttpContext.Current.IsDebuggingEnabled</code> is based on the value of compilation debug="true/false" in your web.config. I have it set to true in my code directory, and false in my publish directory when I need to test http and https redirection locally.

I add in the <code>IsPostBack</code> simply to make it (slightly) more efficient by skipping the extra ssl checking when not needed.

blocks|key|968006|text|我也推荐tvalfonsso的解决方案，但稍微修改一下，以防url重写(RawUrl不同于Url)。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|968007|++++if+(SPPage+==+SPPages.StartAutotrading+&&+!Request.IsLocal+&&+!Request.IsSecureConnection)
++++++++{
++++++++++++string+redirectUrl+=+(Request.Url.ToString().Replace(Request.Url.PathAndQuery.ToString(),+"")+%2B+Request.RawUrl).Replace("http:",+"https:");
++++++++++++Response.Redirect(redirectUrl);
++++++++}|code-block|syntax|javascript|968008|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

I would also suggest tvalfonsso's solution, but with a small modification in case you have some url rewriting (RawUrl differs from Url)

<pre><code> if (SPPage == SPPages.StartAutotrading &amp;&amp; !Request.IsLocal &amp;&amp; !Request.IsSecureConnection)
 {
 string redirectUrl = (Request.Url.ToString().Replace(Request.Url.PathAndQuery.ToString(), "") + Request.RawUrl).Replace("http:", "https:");
 Response.Redirect(redirectUrl);
 }
</code></pre>

blocks|key|968047|text|您还可以使用新的UriBuilder：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|968048|Dim+context+As+HttpContext+=+HttpContext.Current
If+Not+context.Request.IsSecureConnection+Then
++++Dim+secureUrl+As+New+UriBuilder(context.Request.Url)
++++secureUrl.Scheme+=+"https"
++++secureUrl.Port+=+443
++++context.Response.Redirect(secureUrl.ToString,+False)
++++Return
End+If|code-block|syntax|javascript|968049|C#|968050|HttpContext+context+=+HttpContext.Current;
if+(!context.Request.IsSecureConnection)
{
++++UriBuilder+secureUrl+=+new+UriBuilder(context.Request.Url);
++++secureUrl.Scheme+=+"https";
++++secureUrl.Port+=+443;
++++context.Response.Redirect(secureUrl.ToString(),+false);
}|968051|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

You can also use the new UriBuilder:

<pre><code>Dim context As HttpContext = HttpContext.Current
If Not context.Request.IsSecureConnection Then
 Dim secureUrl As New UriBuilder(context.Request.Url)
 secureUrl.Scheme = "https"
 secureUrl.Port = 443
 context.Response.Redirect(secureUrl.ToString, False)
 Return
End If
</code></pre>

C#

<pre><code>HttpContext context = HttpContext.Current;
if (!context.Request.IsSecureConnection)
{
 UriBuilder secureUrl = new UriBuilder(context.Request.Url);
 secureUrl.Scheme = "https";
 secureUrl.Port = 443;
 context.Response.Redirect(secureUrl.ToString(), false);
}
</code></pre>

So in my code I want to detect if my login page is being called http, and redirect it to https.

I know there are non code ways to skin this cat, but for frustrating technical reasosn I'm backed into doing it in code.

<pre><code> if (!Request.IsSecureConnection)
 {
 string redirectUrl = Request.Url.ToString().Replace("http:", "https:");
 Response.Redirect(redirectUrl);
 }
</code></pre>

So I drop this in my <code>Page_Load(...)</code>, make sure my debugger uses real IIS, not VS2008s IIS, and hit debug.

Inthe debugger, waltz along, hit 
Response.Redirect("<a href="https://localhost/StudentPortal3G/AccessControl/AdLogin.aspx" rel="noreferrer">https://localhost/StudentPortal3G/AccessControl/AdLogin.aspx</a>"), 
hit f5.

Get "Internet Explorere Cannot Display the webpage, url is HTTP, not HTTPS.
Not getting an informative error... same thing happens not running in the debugger.

So what am I missing? it does not appear to be rocket science, I've seen similar code on lots of blogs...

What am I doing wrong? I figure it has to be a totally obvious Rookie mistake, but I'm not seeing it.

asp.net c# redirecting from http to https

Visual Studio

调试器

因此，在我的代码中，我想要检测我的登录页面是否被称为http，并将其重定向到https。我知道有一些非代码的方法可以剥离这只猫的皮肤，但出于令人沮丧的技术原因，我不得不用代码来做这件事。            if (!Request.IsSecureConnection)            {          ...

问asp.net c#从http重定向到https
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问asp.net c#从http重定向到httpsEN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问asp.net c#从http重定向到https
EN