http to https web access

Hi MJ,

 

 

The problem I see is that your application/web server is making the calls to a Web Service which requires HTTPS. The question is....how is the Web Service configured?

 

 

So here are my questions

 

Is this HTTPS Only Web Service configured to run through a Virtual Server? Is it the same BIG-IP that the HTTP Only Application is using?

 

or

 

Does the HTTPS Only Web Service even have a Virtual Server on the BIG-IP?

 

 

This is why I ask each question:

 

Is this HTTPS Only Web Service configured to run through a Virtual Server? Is it the same BIG-IP that the HTTP Only Application is using?

 

If so, then configure the HTTP Virtual Server for the Web Service to detect where the incoming request is coming from (there are several ways to do this). If it is coming from the HTTP Only Application, Enable your SSL Profile (Server) on the HTTP Virtual Server and let it talk (basically what Kevin was suggesting with a Twist). If it is not coming from your HTTP Only Application do an HTTP to HTTPS Redirect. This will allow your problem child to talk to the Web Service but nobody else (everyone else will need to use HTTPS).

 

 

Does the HTTPS Only Web Service even have a Virtual Server on the BIG-IP?

 

If not then you have a whole new problem. Communication is happening between the HTTP Only Application, directly to the HTTPS Web Service (bypassing the BIG-IP). Since the BIG-IP is an event driven system it is not going to capture the initiated Web Service Call by your HTTP Only Application (Well, it could but you'd really have to dive down deeper than you'd ever want to go to get it). If this is the case I would suggest configuring a Virtual Server for your HTTPS Web Service (even if this is the only application that uses it) and configure your application to use it.

 

 

Hope this helps.