ASP with HTTPS and SSL

[John Xu]

I have a question regarding https and SSL between two web
sites. I am not quit understand how asp application can
handle https, encryption and SSL. Here is scenario:

An asp application on my web site requires to get form
data from web client and to convert the data with XML
format and send the data to another web site which only
accepts https protocol.

If my site needs to receive information from the remote
web site, then I know a digital certificate needs to be
installed on my side. and https configuration needs to be
implemented on local web server.

However, if all of local side need to do is to send data
to remote web server with data encrypted, do I still need
to install digital certificate and enable https on local
web server? If not, how can I encrypt data with the the
certificate so it can be accepted by remote server and be
decoded by remote server side?

Thanks in advance.

John

 

[MSFT]

HI John,

You don't need to install a server digital certificate and enable HTTPS on
your local web server. Your Browse or https protocol will handle all things
like data encryption. Your local web server is just as a client. You only
need to config SSL or HTTPS on the remote server. For more information on
SSL or HTTPS, you can refer to:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/windowsserver2003/proddocs/entserver/msmqconcepts/sag_msmqconcepts_https.
asp

Luke

(This posting is provided "AS IS", with no warranties, and confers no
rights.)

 

[John Xu]

Thanks for your explaination, Luke.
I am not quit sure if I got the point. I know a web browser, like IE
browser, can be configured to use SSL with certificate to talk with a
web server that has a security port for https. However see a scenario
following:

My web browser does not talk directly to remote server. Instead, it
talks with my local server and then deep level application (In this
case, it is ASP application) process data and send embedded data (xml
like) to remote server. Local web server does not has https port
available and a certificate has not been installed. In this case, how
this SSL encryption and certificate can be transport to another remote
web server and data can be decoded by that server?

Thanks

John

 

[John]

Thanks for your explaination, Luke.
I am not quit sure if I got the point. I know a web
browser, like IE browser, can be configured to use SSL
with certificate to talk with a web server that has a
security port for https. However see a scenario following:

My web browser does not talk DIRECTLY to remote server.
Instead, it talks with my local web server (The form is a
local web page) and then deep level application in this
local server (In this case, it is ASP application)
processes data and send embedded data (xml like format) to
remote server. Local web server does not has https port
available and a certificate has not been installed. In
this case, how this SSL encryption and certificate can be
transport to another remote web server and data can be
decoded by that server?

Thanks

John

 

[Mark Schupp]

Your local server will be behaving as a browser would. It already has the
required certificates installed to permit this. That said, I have never
attempted to do this with HTTPS. Have you tried anything yet?

--
Mark Schupp
--
Head of Development
Integrity eLearning
Online Learning Solutions Provider
(e-mail address removed)
http://www.ielearning.com
714.637.9480 x17

 

[MSFT]

Hi John,

In this situation, your local web server will act as "a client" and talk to
the HTTPS port on the remote server. Therefore, it don't need to install
SSL as your clients. Can you you let me know how you send the XML data to
the remote server in your ASP? This may make the things more clear.


Luke
Microsoft Online Partner Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)