Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to redirect https to http without any SSL Certificate

Is difficult to explain what I am seekig here.

I have a website that doesn't have SSL Certificates and I am using a page as a landing page for a Facebook Application.

My Problem is when someone is on a secure connection on facebook (https://) the iframe src is pointed to the same https URL of my landing page. this returns an error like this.

SSL connection error

Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have.

Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error.

How do I may users redirect to http or any workaround without installing SSL Certificates?

like image 833
Atif Avatar asked Jun 13 '11 13:06

Atif


People also ask

Can I use HTTPS without SSL certificate?

Nope. What you're doing when using HTTPS is telling the browser to connect via a different port (443) whereas normally you connect via (80). Without a certificate, the server would refuse the connection. HTTPS is simply not possible without a certificate.

How can I change HTTP to HTTPS without SSL certificate?

Just enter the domain name of your website into a browser's address bar, but instead of typing "http://", enter "https://". For example, if your site is normally accessed via "http://www.example.com/", type "https://www.example.com/" instead.

Can I redirect from HTTPS to HTTP?

When you add an SSL certificate to a domain on your hosting account, the domain will default to being served over HTTPS. If you do not want your site to use HTTPS to serve your site securely, you can change the default from HTTPS to HTTP.

Do you need a certificate for a redirect?

“Browsers definitely need the certificate for HTTPS, even if you're just redirecting. Search engines can probably deal with it, but if there's a chance the old URL is shown to users, just keep the certificate live too.


1 Answers

There is really no way to do that: HTTPS relies on the SSL certificate being present and the SSL negotiation ocurring BEFORE any data is sent to the server. Therefore if there is no SSL cert then it won't even get to the point where you can send a redirect (as you are observing).

I'd suggest just buying the cheapest cert you can: GoDaddy has specials for $12.99 that I've used quite effectively for just this purpose (Facebook app SSL pages) and that you can have bought and ready in 15 minutes.

EDIT: Just use Lets Encrypt, as @xbakesx states in his comment. Completely free, no delay, accepted pretty much everywhere.

like image 164
Femi Avatar answered Oct 07 '22 01:10

Femi