Setting up Visual Studio to use HTTPS and not HTTP

Hi,

I'm hoping some of the other CWS users will chime in. I know that technically this is not OpenText's area. I was asked to find out what would need to change in any application that uses CWS that now has to go through an HTTPS channel (currently, only HTTP is in use). Just like in the various guides to building a WS app, I've edited the reference.svcmap file in Visual Studio. Even after making my self-signed certificate trusted on my machine, whenever I update the metadata source address and protocol to point to the SSL URL, when it completes, no error, but the protocol always changes back from HTTPS to HTTP. This means that effectively, I cannot access a site that is HTTPS only for WS calls. Googling it, I found very little of any use, hence I'm posting here hoping some WS app developers have encountered this. I did notice from Google someone suggesting to validate that when you do a WSDL request, it actually generates WSDL. I discovered that WSDL requests on the HTTPS URL automatically redirect to the HTTP one, which is probably why I'm getting the protocol in reference.svcmap change back. I tried adding the httopsGetEnabled="true" and httpsGetURL="" to my web.config in the web services directory but that made no difference (even after restarting IIS).

Has anyone else encountered issues getting your CWS apps to work with HTTPS? At some point, we need to turn on HTTPS and turn off HTTP, but we cannot do it if we have no way of getting our WS apps to work with HTTPS.

Thanks in advance

-Hugh Ferguson

Find more posts tagged with

Comments

Jeremy Naylor

Not really sure if this is of any use, its more from the CWS side then the app side, I just know that CAD Manager 10.5.2 is essentially a CWS based app. It might provide some insight., If you have access to that or not.

link to the champion toolkit to configure the SSL/SSO.

https://knowledge.opentext.com/knowledge/cs.dll/Open/63023945

Guy_Pomerleau

Here in my organisation we do HTTP and HTTPS but it depends on your scenarios and configuration. It's not only a matter of changing http to https. First, .Net or Java? How do you authenticate? Windows authenticated or content server? IIS or tomcat? Directory service or opentext directory service (OTDS)? Which Content server version? Here we are doing http with Windows authenticated and HTTPS with non-windows (require content server account) . We have IIS and 2 virtual directory: one windows authenticated and the other one non-windows. If I recall when we were doing testing in CS 10.0, windows authenticated with https was not supported by CWS. Do you need to do impersonate? Kerberos required? Depending of your scenarios/environnement I can share our web.config.

You can have a look at: https://knowledge.opentext.com/knowledge/llisapi.dll?func=ll&objId=17019999&objAction=viewincontainer&ShowReplyEntry=30183275

HFCDev

here, this is for CS 10.0 U2015-06, and I'm just using straight CS authentication (no SSO). Also, this is Visual Studio 2013/.NET development. I tried following the hint in the thread and added back

whereever it was uncommented. Now I get a server error whether I hit https or http.

-Hugh

HFCDev

I managed to resolve the server errors by fixing typos in the web.config, but even with endpoints defined in the Web Service's web.config it interprets all https WSDL requests as http. Similarly Visual studio, when I try to get the reference.svcmap to point to https using the https protocol, it continually revers the protocol to http.

-Hugh

eLink User

Hugh,

Jeremy Naylor's article looks very much similar to how I did this for fun

I was basically using this on 971 though similar to yours

had to methodically remove all non ssl things in the web.config

Links to my document are to communities which OT has killed but I may have it with me if you want a peek

..... appnair appunair( Livelink Rocks )

Well, if I called the wrongnumber, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937

On Wed, Aug 24, 2016 at 1:49 PM, eLink Entry: Content Web Services Forum <otdncontentwebservices971forum@elinkkc.opentext.com> wrote:

Setting up Visual Studio to use HTTPS and not HTTP 2 Posted byFerguson, HughOn 08/24/2016 02:37 PM

here, this is for CS 10.0 U2015-06, and I'm just using straight CS authentication (no SSO). Also, this is Visual Studio 2013/.NET development. I tried following the hint in the thread and added back<endpoint address="" binding="basicHttpBinding" bindingConfiguration="SearchServiceBinding_SSL"
bindingNamespace="urn:SearchServices.service.livelink.opentext.com"
contract="OpenText.Livelink.Service.SearchServices.ISearchService_WCF" />whereever it was uncommented. Now I get a server error whether I hit https or http.-Hugh
[To post a comment, use the normal reply function]Topic:Setting up Visual Studio to use HTTPS and not HTTPForum:Content Web Services ForumContent Server:Knowledge Center

Guy_Pomerleau

Here the web.config I use for https, CS authenticated. Pay attention, we only change the: authentication, documentmanagement and memberservice services.

the key is this line: <serviceMetadata httpGetEnabled="false" httpsGetEnabled="true" httpsGetUrl="" /> and the security mode also:

HFCDev

Thanks Guy,

I'm still noticing the same exact problem. I even tried commenting out the non-SSL endpoints having enabled the SSL ones. I tried taking the <transport clientCredentialType="None"/> out of the security tag. I've even forced the les-services directory to be https only. All that does is I now get an error when I click on the http link, but still if I enter the URL https://myfqdn/les-services/Authentication.svc?wsdl, I get the same page that IIS generates when you just go to https://myfqdn/les-services/Authentication.svc with a link to get the WSDL but that link is still http, not https.

-Hugh

HFCDev

HA!! Got it working!

You really have to tweak your Google searches to get at the right thing. I got a clue from this post on Stack Overflow:

http://stackoverflow.com/questions/3750945/wrong-url-in-wsdl-hyperlink-when-using-wcf-https

There, it was suggesting that the problem was the https header was either not being set or being set incorrectly. I found an article on how to set it as having set up the https binding in IIS 7's GUI wasn't cutting it. In the following article, it describes a process to manually set the hostname to the https binding so now you get the https header:

http://stackoverflow.com/questions/3369679/iis7-how-to-bind-ssl-certificate-to-https-host-header

However, when I did this, I ended up getting the hostname set in the binding but the certificate missing. By adding back the certificate through the IIS GUI, I resolved that problem.

Then I rebuild my WS service reference, and finally it all worked and I can see the WSDL proper when I access via https. It still sets the protocol to http in the reference.svcmap file, but now at least, so long as the host name matches the server in my client endpoint (which I can set), I am going through https as opposed to http for my web service.

Thanks to all who posted suggestions. They incrementally got me to the right thing.

-Hugh

Kevin_Bailey

Excellent! Great you got it working, and thanks for sharing your experiences!

From: eLink Entry: Content Web Services Forum [mailto:otdncontentwebservices971forum@elinkkc.opentext.com]
Sent: Thursday, August 25, 2016 1:34 PM
To: eLink Recipient
Subject: Setting up Visual Studio to use HTTPS and not HTTP 3

Setting up Visual Studio to use HTTPS and not HTTP 3

Posted by Ferguson, Hugh On 08/25/2016 01:30 PM

HA!! Got it working!

You really have to tweak your Google searches to get at the right thing. I got a clue from this post on Stack Overflow:

http://stackoverflow.com/questions/3750945/wrong-url-in-wsdl-hyperlink-when-using-wcf-https

http://stackoverflow.com/questions/3369679/iis7-how-to-bind-ssl-certificate-to-https-host-header

However, when I did this, I ended up getting the hostname set in the binding but the certificate missing. By adding back the certificate through the IIS GUI, I resolved that problem.

Thanks to all who posted suggestions. They incrementally got me to the right thing.

-Hugh

[To post a comment, use the normal reply function]
Topic:	Setting up Visual Studio to use HTTPS and not HTTP
Forum:	Content Web Services Forum
Content Server:	Knowledge Center