SVC WebService works through HTTP, does not work through HTTPS

One of my colleagues had a problem calling AJAX in .NET WebService. The call works under HTTP, but the same call has a problem with HTTPS. The web service is written in .NET 4.0 with C # on the IIS 7 server.

A secure site is located at https://sql.data-rx.com/grouppharmdrugsearch/ . There is an unprotected version of http://sql.data-rx.com/grouppharmdrugsearch/ . There is no confidential information on the page itself. It is embedded (I believe in the frame) on a client website that uses HTTPS, and our page should be in HTTPS, so browsers do not provide mixed protected / insecure elements representing the message.

To check the problem on the site, you first need to enter the zip code in the second text box (I used 90210 for testing), and then you can enter the first few letters of the medicine in the third text box. After waiting a second or so for additional letters, the page calls a web service to fill out a drop-down list of possible drug uses, starting with the attached letters. A secure call to webservice is https://sql.data-rx.com/grouppharmdrugsearch/Service/drugNameAutocomplete.svc/GetDrugList with POST data for "prefixText" and "count". In the HTTP section, the service call completes successfully and populates the drop-down list; with HTTPS, the call receives error 404. The HTTPS web service is available if you point the browser tohttps://sql.data-rx.com/grouppharmdrugsearch/Service/drugNameAutocomplete.svc , but the method is not recognized when it is added to the service.

I use the Firefox Tamper Data addon to compare service calls, and they seem to be exactly the same, except for one on the HTTPS site and one on the HTTP site, with the corresponding data sources being changed accordingly. An HTTPS call receives a 404 error, while an HTTP call receives JSON data.

I believe that there may be something inactive in the web service that would allow you to work under HTTPS (although I canโ€™t think of anything that should matter in this case), or the HTTPS website itself was incorrectly configured, when it was installed. Any help would be appreciated.

+3
1

, . HTTP, HTTPS, , - HTTPS.

+3

Source: https://habr.com/ru/post/1754642/


All Articles