• Global community
    • Language:
      • Deutsch
      • English
      • Español
      • Français
      • Português
  • 日本語コミュニティ
    Dedicated community for Japanese speakers
  • 한국 커뮤니티
    Dedicated community for Korean speakers
Exit
0

Error: This page must be viewed over a secure channel

Community Beginner ,
Mar 15, 2019 Mar 15, 2019

Copy link to clipboard

Copied

Hi,

I recently installed a wildcard SSL certificate on our domain artgalore.ca.

Soon after, I started to get support emails from customers to say they could no longer access the site because of a 403 error, as seen below.  When I turned off my anti-virus software, I was able to access the site.  I searched a couple of forums for specifics, nothing seems to be working.

Any help is appreciated.

Arny

artgalore.JPG

Views

241

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Mar 15, 2019 Mar 15, 2019

Copy link to clipboard

Copied

It looks like you've disabled plaintext HTTP and only enabled HTTPS. That's actually fine, as long as no one tries to connect via HTTP. But in your screenshot, you're trying to connect via HTTP. What you might want to do is leave both HTTP and HTTPS enabled, then use either IIS or CF to redirect all HTTP requests to HTTPS, then for good measure add an HSTS response header so that future requests from the same client will use HTTPS automatically.

Dave Watts, Eidolon LLC

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Beginner ,
Mar 15, 2019 Mar 15, 2019

Copy link to clipboard

Copied

Hi Dave,

Do you have an example script?

Arny

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Mar 15, 2019 Mar 15, 2019

Copy link to clipboard

Copied

LATEST

Something along the lines of this in Application.cfm or Application.cfc:

<cfif not cgi.https>

     <cflocation url="https://#cgi.server_name##cgi.script_name#?#cgi.query_string#" />

</cfif>

Dave Watts, Eidolon LLC

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Resources
Documentation