Calling web service over https

Question

User74717037 posted

Happy New Year everyone!

I installed an SSL certificate on my server and created a web forms application that included a web service.  When using https in the URL, the browsers (IE, Chrome, Safari) are showing the padlock so I believe it is working as needed.

I have a console application running on a standalone PC that consumes the web service within the web application.  In the service reference on the console application I used https in the url and it does return the expected data without error.

My questions are:  Have I set everything up properly?  Do I need to do anything else to ensure the console application and web service are exchanging data that is encrypted?

Thanks in advance for your help/suggestions! 

Answer 1

User1779161005 posted

If you have a PluralSight subscription, the first module to the "Securing ASP.NET Web APIs" by Dominick Baier has a whole module on configuring SSL. It's essential knowledge in how to do it right.

Answer 2

User74717037 posted

I don't have a PluralSight subscription so I cannot view that module.  But thank you for the suggestion.

Answer 3

User753101303 posted

Hi,

Make sure your app uses the https: prefix.

You could aso use https://technet.microsoft.com/en-us/library/cc732367(v=ws.10).aspx to require the use of SSL. You can also check the server side logs to track non SSL usage.