HTTPS Webservices

How can you garantee that a Webservice is only available with https?

When you configure with SSL in the servicecenter the http is still available to call.

Thanks,
Rodrigo

Hi Rodrigo

That behavior doesn't seem consistent with the overall behavior for the HTTP Security features of the Agile Platform. If you set the Web Flow or Web Screen to SSL, any HTTP request will generate the runtime exception HTTPS connection required for this screen, so I would expect the same behavior for Web Services as well.

I'll check with OutSystems R&D and give you feedback on this.

Cheers

Miguel Simões João

Hi,
How can i garantee that a Webservice is only available through https?
It's only set it to SSL or i need to do something else?

I'm using Plataform 4.2 .Net

Best regards,
Luis Oliveira

Hi Luis

When creating the Web Service on Service Studio, you can speficy the HTTP Security property to SSL on the web service properties.

All access by HTTP to this web service web methods will result in the error HTTPS connection required for this web service.

Cheers

Miguel Simões João

Hi,
I already set the option to SSL, and still open in HTTP but not in HTTPS (Page nout found)

Hi Luis

Are you accessing the web service WSDL or invoking a web method? The SSL validation only block the web method invocation, not the WSDL access.

Also, do you have a SSL Certificate installed on your server to allow HTTPS on IIS? You need to have a SSL Certificate on IIS to allow HTTPS access (http://www.iis.net/learn/manage/configuring-security/how-to-set-up-ssl-on-iis).

Cheers

Miguel Simões João