Community
Showing results for 
Search instead for 
Do you mean 
Reply

Act! Premium For Web Over SSL

Accepted Solution Solved
Copper Contributor
Posts: 8
Country: United Kingdom
Accepted Solution

Act! Premium For Web Over SSL

I set up an office Web server for a local company to host Act! Premium for Web (Version 12.0.0.401).  My concern for security meant that we bought an SSL certificate and installed it in IIS, so that log in details were not passed over the Internet in clear text.

 

Act! telephone support were not sure of a way to direct users from the log in page accessed via https to access the program over http.  Upon testing we have found that the program is very slow if used entirely over https, as expected.

 

Is there a way of directing the user away from https after logging in automatically?

 

Thanks very much for any help.

 

 

Ed Sansbury

sansburycc dot com


Accepted Solutions
Solution
Accepted by topic author cmsesan1
‎09-25-2015 03:20 AM
Copper Contributor
Posts: 8
Country: United Kingdom

Re: Act! Premium For Web Over SSL

I spent a few hours writing an http module which appears to solve the problem.

 

https is used for the log in page (default.aspx)

Otherwise, the user is switched back to http

 

If anyone has a similar problem I can be contacted via sansburycc.com

View solution in original post


All Replies
Platinum Elite Contributor
Posts: 14,388
Country: Australia

Re: Act! Premium For Web Over SSL

1. The speed difference can depend on the certificate. See http://support.microsoft.com/kb/295070

 

2. If ability to login is the issue, set the Virtual Folder to Integrated Windows Auth rather than Anonymous - then anyone would need to get a domain account before being able to access ACT!

 

3. I haven't tried this, but maybe just open the Virtual Folder (in IIS Manager), right-click on Default.aspx and select Properties - File Security Tab.

In Secure Communications - click Edit

Set that file to use SSL. That should just set that file to use SSL, which I think would be enough

Copper Contributor
Posts: 8
Country: United Kingdom

Re: Act! Premium For Web Over SSL

Thanks for your response Mike.

 

If I were to set the log in to integrated Windows authentication (2), I believe the usernames and passwords would still be passed as clear text and that would not solve the problem of security.  There is no problem with logging in, its just that the speed is too slow if SSL is used throughout the whole application.

 

I am quite sure if I log in with https then the entire application will just use https and be incredibly slow - that is unless the user is automatically re-directed to http.

 

I think the answer could be to write an http module which directs you to https for the login file (default.aspx I think) and http for everything else.

 

Regards

 

 

 

Ed

sansburycc dot com

Platinum Elite Contributor
Posts: 14,388
Country: Australia

Re: Act! Premium For Web Over SSL

You might also try a different certificate location as per the Microsoft KB link in item 1 

 

With 2, the ACT! user/pass might be clear, but to get there, they'd need a Domain login first ... and those credential are hashed.

 

The way I suggested in 3 above will make on the one page use SSL... not the entire virtual folder

 

 

Copper Contributor
Posts: 8
Country: United Kingdom

Re: Act! Premium For Web Over SSL

I will look into the certificate location later on.

 

I cannot do digest authentication as there is no domain controller. The Web server is just a Windows XP machine in a home office.

 

I have ticked "Require SSL" in IIS for the default.aspx file but once logged in, the https connection is still there and everything becomes desperately slow. You are not directed to the first page via http.

 

This link looks promising describing how to write an http module to solve this problem.

 

I will have another go later on tonight and let you know how I get on.  If companies are hosting Act! then I would expect this problem to have been solved before.

 

Thanks

 

 

Ed

Solution
Accepted by topic author cmsesan1
‎09-25-2015 03:20 AM
Copper Contributor
Posts: 8
Country: United Kingdom

Re: Act! Premium For Web Over SSL

I spent a few hours writing an http module which appears to solve the problem.

 

https is used for the log in page (default.aspx)

Otherwise, the user is switched back to http

 

If anyone has a similar problem I can be contacted via sansburycc.com