ASP.NET Core redirect http to https

Question

I have created a redirect rules in my web.config to redirect my website from http to https. The issue i have is that every single link on the website is now https. I have a lots of link to other website which don't have SSL and therefore i get certificate errors. This is what i have done:

  <rewrite>
  <rules>
    <rule name="HTTP/S to HTTPS Redirect" enabled="true" stopProcessing="true">
      <match url="(.*)" />
      <conditions logicalGrouping="MatchAny">
        <add input="{SERVER_PORT_SECURE}" pattern="^0$" />
      </conditions>
      <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirectType="Permanent" />
    </rule>
  </rules>
</rewrite>

How can i redirect https only for my domain and not every links on my website?

This makes no sense. Rewrite only changes requests coming into the server. It doesn't change the html responses coming back from the server. — Joel Coehoorn
– Joel Coehoorn, Commented Jun 28, 2019 at 3:57

victorvartan · Accepted Answer · 2020-11-21 14:58:48Z

16

Edit: While it still works, things changed a bit since I wrote this answer. Please check D.L.MAN's more up to date answer: https://stackoverflow.com/a/56800707/844207

In asp.net Core 2 you can use an URL Rewrite independent of the Web Server, by using app.UseRewriter in Startup.Configure, like this:

        if (env.IsDevelopment())
        {
            app.UseBrowserLink();
            app.UseDeveloperExceptionPage();
        }
        else
        {
            app.UseExceptionHandler("/Home/Error");

            // todo: replace with app.UseHsts(); once the feature will be stable
            app.UseRewriter(new RewriteOptions().AddRedirectToHttps(StatusCodes.Status301MovedPermanently, 443));
        }

edited Nov 21, 2020 at 14:58

answered May 14, 2018 at 19:11

victorvartan

1,0022 gold badges11 silver badges31 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Brett Rigby Over a year ago

The UseRewriter method comes from the following using statement: using Microsoft.AspNetCore.Rewrite;

Sergio López · Accepted Answer · 2017-06-13 18:18:07Z

11

Actually (ASP.NET Core 1.1) there is a middleware named Rewrite that includes a rule for what you are trying to do.

You can use it on Startup.cs like this:

var options = new RewriteOptions()
    .AddRedirectToHttpsPermanent();

app.UseRewriter(options);

answered Jun 13, 2017 at 18:18

Sergio López

9739 silver badges16 bronze badges

2 Comments

Tomasz Madeyski Over a year ago

here's some additional resource learn.microsoft.com/en-us/aspnet/core/security/enforcing-ssl

Hiren Kagrana Over a year ago

For Asp .Net Core 2.1 onwards, use app.UseHttpsRedirection(); middleware. Ref: learn.microsoft.com/en-us/aspnet/core/security/…

D.L.MAN · Accepted Answer · 2021-04-17 14:37:48Z

In ASP.NET Core 2.2 you should use Startup.cs settings for redirect http to https

so add this in ConfigureServices:

public void ConfigureServices(IServiceCollection services)
{
    services.AddHttpsRedirection(options =>
    {
        options.HttpsPort = 443;
    });                           // <=== Add this (AddHttpsRedirection) =====

    services.AddRazorPages();  
}

and add this in Configure :

public void Configure(IApplicationBuilder app, IHostingEnvironment env)
{
    if (env.IsDevelopment())
    {
        app.UseDeveloperExceptionPage();
        app.UseDatabaseErrorPage();
    }
    else
    {
        app.UseExceptionHandler("/Home/Error");
        app.UseHsts();            // <=== Add this =====
    }

    app.UseHttpsRedirection();    // <=== Add this =====
}

in launchSettings.json check blow items exsits:

{
  "iisSettings": {
    "windowsAuthentication": false,
    "anonymousAuthentication": true,
    "iisExpress": {
      "applicationUrl": "http://localhost:63278",
      "sslPort": 44377      // <<===  check this port exists.
    }
  },
  "YOUR_PROJECT_NAME": {
      "commandName": "Project",
      "dotnetRunMessages": "true",
      "launchBrowser": true,
      "applicationUrl": "https://localhost:5001;http://localhost:5000",  // <=== check https url exists.
      "environmentVariables": {
        "ASPNETCORE_ENVIRONMENT": "Development"
      }
    }
  }
}

then enjoy it.

Don Thomas Boyle · Accepted Answer · 2019-02-04 22:25:30Z

4

asp.net core < 2 just put this code into your startup.cs

        // IHostingEnvironment (stored in _env) is injected into the Startup class.
        if (!_hostingEnvironment.IsDevelopment())
        {
            services.Configure<MvcOptions>(options =>
            {
                options.Filters.Add(new RequireHttpsAttribute());
            });
        }

edited Feb 4, 2019 at 22:25

Don Thomas Boyle

3,0553 gold badges36 silver badges54 bronze badges

answered May 9, 2018 at 14:17

Shiwanka Chathuranga

88910 silver badges21 bronze badges

Comments

Nicola Di Lillo · Accepted Answer · 2019-02-23 17:44:40Z

4

You will need to add also the following code in .net core 2.1

public void Configure(IApplicationBuilder app, IHostingEnvironment env)
{
    if (env.IsDevelopment())
    {
        app.UseDeveloperExceptionPage();
    }
    else
    {
        app.UseExceptionHandler("/Error");
        app.UseHsts();
    }

    app.UseHttpsRedirection();
    app.UseStaticFiles();
    app.UseCookiePolicy();

    app.UseMvc();
}

and the following part in service configuration

       services.AddHttpsRedirection(options =>
       {
        options.RedirectStatusCode = StatusCodes.Status307TemporaryRedirect;
        options.HttpsPort = 5001;
        });

answered Feb 23, 2019 at 17:44

Nicola Di Lillo

1,9801 gold badge13 silver badges11 bronze badges

Comments

Dzianis Yafimau · Accepted Answer · 2018-08-28 21:06:58Z

2

In ASP.NET Core 2.1 just use this:

public void Configure(IApplicationBuilder app, IHostingEnvironment env)
{
    if (env.IsDevelopment())
    {
        app.UseDeveloperExceptionPage();
    }
    else
    {
        app.UseExceptionHandler("/Error");
        app.UseHsts();   // <-- Add this !!!!!
    }

    app.UseHttpsRedirection(); // <-- Add this !!!!!
    app.UseStaticFiles();
    app.UseCookiePolicy();

    app.UseMvc();
}

answered Aug 28, 2018 at 21:06

Dzianis Yafimau

2,0461 gold badge29 silver badges41 bronze badges

1 Comment

James Conkling Over a year ago

relevant docs: learn.microsoft.com/en-us/aspnet/core/security/…

Collectives™ on Stack Overflow

ASP.NET Core redirect http to https

6 Answers 6

1 Comment

2 Comments

Comments

Comments

Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

6 Answers 6

1 Comment

2 Comments

Comments

Comments

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related