Switching out of SSL mode

Dev Shed Forums Sponsor:

September 24th, 2001, 11:33 AM

jerryg

Junior Member

Join Date: Sep 2001

Posts: 3

Time spent in forums: < 1 sec
Reputation Power: 0

Switching out of SSL mode

Hello,
I hope someone can help me with this problem. My site uses both https and http requests.
My site uses SSL for loging in and accepting credit cards.
After a user logs into my site with the https protocol, I want the server to respond with an http: page, not https. In other words,
using CGI and Perl, how do I remove SSL for the response page?

Any help will be greatly appreciated.

Regards,
Jerry G.

September 24th, 2001, 11:59 AM

freebsd

Contributing User

Join Date: Jan 2001

Posts: 5

Time spent in forums: < 1 sec
Reputation Power: 0

>> My site uses both https and http requests

Do you run your own server?

>> After a user logs into my site

What authentication method?

>> I want the server to respond with an http

In which stage exactly?

>> how do I remove SSL for the response page?

What response page? After payment?

September 24th, 2001, 01:59 PM

jerryg

Junior Member

Join Date: Sep 2001

Posts: 3

Time spent in forums: < 1 sec
Reputation Power: 0

Quote:

Originally posted by freebsd
>> My site uses both https and http requests

Do you run your own server?
No. Earthlink is my host. It runs an Apache server on Linux.

>> After a user logs into my site

>> What authentication method?
I check the user ID and password which are stored in a file.

>> I want the server to respond with an http

>> In which stage exactly?
After loging in I respond with a frameset and two frames. In frame one, the user selects the various operations. The choices are links to perl scripts which copies the approprate document to frame two. The document in frame two is a from with various fields which are posted and processed by another perl script.

The user continues this process with additionl opeations until done.

The problem is that the browser remains in SSL mode which slows the posted data and server responses.

>> how do I remove SSL for the response page?

>>What response page? After payment?

See above.

Thanks for you help.
JerryG

September 25th, 2001, 01:55 AM

freebsd

Contributing User

Join Date: Jan 2001

Posts: 5

Time spent in forums: < 1 sec
Reputation Power: 0

>> I check the user ID and password which are stored in a file

How exactly? Are you using Auth Baisc type?

Switching to or out of SSL mode is not a difficult task at all. You should concern about the lost of session/cookie, if any.

Say you authenticated to https site successfully, but then switch to http then you will have to re-login again. If you ever tried hotmail, u would see they use https for login then redirect to non-https, but the session is taking over to identify your account.

You are probably out of luck for hosting your site at earthlink.

September 27th, 2001, 01:46 PM

jerryg

Junior Member

Join Date: Sep 2001

Posts: 3

Time spent in forums: < 1 sec
Reputation Power: 0

Quote:

Originally posted by freebsd
>> I check the user ID and password which are stored in a file

How exactly? Are you using Auth Baisc type?

Switching to or out of SSL mode is not a difficult task at all. You should concern about the lost of session/cookie, if any.

Say you authenticated to https site successfully, but then switch to http then you will have to re-login again. If you ever tried hotmail, u would see they use https for login then redirect to non-https, but the session is taking over to identify your account.

The hotmail example is exactly what I want to do. I am now concerned with session info because I store some info in a frame that remains between sessions.

You are probably out of luck for hosting your site at earthlink.

Switching out of SSL mode

Developer Shed Advertisers and Affiliates