ssl certificate issue

Question

I have dotnetnuke based site. I have enabled SSL option.

I am getting two problems,

1. when i type it's url say www.abc.com it goes to http://www.abc.com rather https://www.abc.com until i explicitly mention.. is there any way, it redirects to https://www.abc.om rather http://www.abc.com

2. i get untrusted certificate security warning from my browser... how can i avoid that?

Thanks,

Answer 1

To get round the untrusted certificate issue you can

1. Buy a certificate from a trusted provider
2. Install your own certificate into the root certificate providers store

If you want this to be a public website, then option 1 is your only choice.

Answer 2

As Ian said, you will have to make sure that SSL Enabled is set in both the site settings (Admin > Site Settings) as well as the specific Page Settings (Settings Icon in the control panel or via the Admin > Pages for the page(s) you want to secure. You may also want to watch out for the Enforce SSL option, as it will prohibit access to the page using the https protocol.

Regarding the Untrusted Certificate error, much as David also said, if you plan to put your site public you will want/need to get a SSL from one of the trusted providers. I personally use GoDaddy for my SSL Cert purchases, and they are run through Starfield Technologies. I think we pay ~$35 (?) per year for a 'basic' cert.

Just a quick note - I ONLY use GoDaddy for SSL purchases and Domain registration / management (I handle ~300 domains for various clients). Their phone help (stubborn inbound transfers usually) is usually spot-on. However, I handle all hosting in-house. I have heard some real horror stories about hosting DNN on GoDaddy, especially if you don't pony up for a dedicated server - the only option they have (last I checked) for getting Host-level access or having DNN 5.x installed.