List of all SSL pages

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Doug - 24 Feb 2006 17:52 GMT

Hello! I'm trying to figure out if there's a way to determine what pages
have been set for SSL on my site. The site consists of a couple of thousand
pages (a university site) and we're developing a new site for launch in the
summer. Naturally, I want to be sure we set SSL on the new pages as well. It
may have to be something we just recognize as the new site is being
developed. But I'd like to get a list to begin with.

Any way to do this?

Thanks
Doug

Reply to this Message

David Wang [Msft] - 25 Feb 2006 10:02 GMT

Sure it is doable; have to write a script to determine whether SSL is
required for a given URL namespace.

IIS itself does not maintain a list of properties applicable to any URL
resource. In the most efficient manner, it calculates and caches this
metadata on the fly based on request access. So, you have no master list,
which means you have to do it yourself by enumerating through IIS
configuration for the applicable property and determining what scope it is
applicable for (and possibly any virtual-to-physical mappings -- for
example, to determine what physical pages have the virtual property of "SSL
enabled").

Signature

//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

> Hello! I'm trying to figure out if there's a way to determine what pages
> have been set for SSL on my site. The site consists of a couple of
[quoted text clipped - 7 lines]
> Thanks
> Doug

Reply to this Message

Ratatooie - 27 Feb 2006 15:24 GMT

> Hello! I'm trying to figure out if there's a way to determine what pages
> have been set for SSL on my site. The site consists of a couple of
[quoted text clipped - 7 lines]
> Thanks
> Doug

SSL "on pages" would consist of:

- "Encryption required" property set on the resource in IIS
- Hyperlinks to those files in HTTPS

"Secured" is not a file property, but rather a property of the protocol used
to get the file from the server. Any given file can be accessed encrypted
or unencrypted (with the exception of those in point one above).

You could do a search though the files looking for 'href="https' as your
string to get the links (other strings may apply).

Also, you might have some luck finding the "enecryption required" setting by
exporting the metabase and using one of the edit tools on it.

Reply to this Message