#1
  1. No Profile Picture
    Junior Member
    Devshed Newbie (0 - 499 posts)

    Join Date
    Sep 2001
    Posts
    3
    Rep Power
    0

    Switching out of SSL mode


    Hello,
    I hope someone can help me with this problem. My site uses both https and http requests.
    My site uses SSL for loging in and accepting credit cards.
    After a user logs into my site with the https protocol, I want the server to respond with an http: page, not https. In other words,
    using CGI and Perl, how do I remove SSL for the response page?

    Any help will be greatly appreciated.

    Regards,
    Jerry G.
  2. #2
  3. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jan 2001
    Posts
    4
    Rep Power
    0
    >> My site uses both https and http requests

    Do you run your own server?

    >> After a user logs into my site

    What authentication method?

    >> I want the server to respond with an http

    In which stage exactly?

    >> how do I remove SSL for the response page?

    What response page? After payment?
  4. #3
  5. No Profile Picture
    Junior Member
    Devshed Newbie (0 - 499 posts)

    Join Date
    Sep 2001
    Posts
    3
    Rep Power
    0
    Originally posted by freebsd
    >> My site uses both https and http requests

    Do you run your own server?
    No. Earthlink is my host. It runs an Apache server on Linux.

    >> After a user logs into my site

    >> What authentication method?
    I check the user ID and password which are stored in a file.

    >> I want the server to respond with an http

    >> In which stage exactly?
    After loging in I respond with a frameset and two frames. In frame one, the user selects the various operations. The choices are links to perl scripts which copies the approprate document to frame two. The document in frame two is a from with various fields which are posted and processed by another perl script.

    The user continues this process with additionl opeations until done.

    The problem is that the browser remains in SSL mode which slows the posted data and server responses.


    >> how do I remove SSL for the response page?

    >>What response page? After payment?
    See above.

    Thanks for you help.
    JerryG
  6. #4
  7. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jan 2001
    Posts
    4
    Rep Power
    0
    >> I check the user ID and password which are stored in a file

    How exactly? Are you using Auth Baisc type?

    Switching to or out of SSL mode is not a difficult task at all. You should concern about the lost of session/cookie, if any.

    Say you authenticated to https site successfully, but then switch to http then you will have to re-login again. If you ever tried hotmail, u would see they use https for login then redirect to non-https, but the session is taking over to identify your account.

    You are probably out of luck for hosting your site at earthlink.
  8. #5
  9. No Profile Picture
    Junior Member
    Devshed Newbie (0 - 499 posts)

    Join Date
    Sep 2001
    Posts
    3
    Rep Power
    0

    Arrow


    Originally posted by freebsd
    >> I check the user ID and password which are stored in a file

    How exactly? Are you using Auth Baisc type?

    Switching to or out of SSL mode is not a difficult task at all. You should concern about the lost of session/cookie, if any.

    Say you authenticated to https site successfully, but then switch to http then you will have to re-login again. If you ever tried hotmail, u would see they use https for login then redirect to non-https, but the session is taking over to identify your account.

    The hotmail example is exactly what I want to do. I am now concerned with session info because I store some info in a frame that remains between sessions.

    You are probably out of luck for hosting your site at earthlink.

IMN logo majestic logo threadwatch logo seochat tools logo