List of all SSL pages

24 Feb 2006 5:52 PM

Doug

Hello! I'm trying to figure out if there's a way to determine what pages
have been set for SSL on my site. The site consists of a couple of thousand
pages (a university site) and we're developing a new site for launch in the
summer. Naturally, I want to be sure we set SSL on the new pages as well. It
may have to be something we just recognize as the new site is being
developed. But I'd like to get a list to begin with.

Any way to do this?

Thanks
Doug

25 Feb 2006 10:02 AM

David Wang [Msft]

Sure it is doable; have to write a script to determine whether SSL is
required for a given URL namespace.

IIS itself does not maintain a list of properties applicable to any URL
resource. In the most efficient manner, it calculates and caches this
metadata on the fly based on request access. So, you have no master list,
which means you have to do it yourself by enumerating through IIS
configuration for the applicable property and determining what scope it is
applicable for (and possibly any virtual-to-physical mappings -- for
example, to determine what physical pages have the virtual property of "SSL
enabled").

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

Show quoteHide quote

"Doug" <dgei***@REMOVEsnet.net> wrote in message
news:yJHLf.2180$%m4.1090@newssvr33.news.prodigy.com...
> Hello! I'm trying to figure out if there's a way to determine what pages
> have been set for SSL on my site. The site consists of a couple of
> thousand pages (a university site) and we're developing a new site for
> launch in the summer. Naturally, I want to be sure we set SSL on the new
> pages as well. It may have to be something we just recognize as the new
> site is being developed. But I'd like to get a list to begin with.
>
> Any way to do this?
>
> Thanks
> Doug
>

27 Feb 2006 3:24 PM

Ratatooie

Show quote Hide quote

"Doug" <dgei***@REMOVEsnet.net> wrote in message
news:yJHLf.2180$%m4.1090@newssvr33.news.prodigy.com...
> Hello! I'm trying to figure out if there's a way to determine what pages
> have been set for SSL on my site. The site consists of a couple of
> thousand pages (a university site) and we're developing a new site for
> launch in the summer. Naturally, I want to be sure we set SSL on the new
> pages as well. It may have to be something we just recognize as the new
> site is being developed. But I'd like to get a list to begin with.
>
> Any way to do this?
>
> Thanks
> Doug
>

SSL "on pages" would consist of:

- "Encryption required" property set on the resource in IIS
- Hyperlinks to those files in HTTPS

"Secured" is not a file property, but rather a property of the protocol used
to get the file from the server. Any given file can be accessed encrypted
or unencrypted (with the exception of those in point one above).

You could do a search though the files looking for 'href="https' as your
string to get the links (other strings may apply).

Also, you might have some luck finding the "enecryption required" setting by
exporting the metabase and using one of the edit tools on it.