frenzypeng / securityswitch

Automatically exported from code.google.com/p/securityswitch
Other
0 stars 0 forks source link

Support for ASP.NET 1.1 #21

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
I am trying to use SecuritySwitch on a legacy web site consisting of many 
applications (root and sub directories) running on Windows Server 2003, IIS6.  
The site is ASP.NET 1.1 and SSL is handled by a BigIP load balancer.  I'm using 
the clone provided by Martin Jarvis that supports SSL offload by checking for a 
particular header value. However, I haven't gotten to the point of testing that 
part yet.

The security switching rules will be in the site's root application, so the 
module addition is seen by all sub applications.  Therefore, the library needs 
to be in the GAC.  I've dealt with that issue and tested on IIS7 using a 
version compiled for .NET 2+.

The wiki mentions support for 1.1, but doesn't describe how.  I've done some 
experimentation but can't see how this is achieved.  I can't compile the code 
in 1.1 due to (at least) the use of generics.

Can you offer any suggestions to get me going in the right direction?

Original issue reported on code.google.com by plan...@gmail.com on 14 Jul 2011 at 9:02

GoogleCodeExporter commented 8 years ago
I apologize for that oversight. Version 2 of this module supported .NET 1.1 and 
I have yet to post it here for those in need of it. However, you can download 
it from my article page on Code Project here:
http://www.codeproject.com/KB/web-security/WebPageSecurity_v2.aspx

The link to the untested source code for version 2 (.NET 1.1) is at the top of 
the article. I haven't touched that code base in a loooong time, but it worked 
well back then, so you should not have any problems. You will have to integrate 
the SSL offload change into that source though.

Original comment by vent...@gmail.com on 15 Jul 2011 at 4:48

GoogleCodeExporter commented 8 years ago
It seems that even the original code will only compile in 2.0 and up (custom 
config attributes and possibly more).  Is the solution to change a 1.1 site/app 
to run under asp.net 2.0 so that the fx2.0 module can be used?  I know that 
this hasn't caused us major problems in the past with old 1.1 libraries, but 
I'm hesitant to make a change to a core, mission critical site.

Original comment by plan...@gmail.com on 18 Jul 2011 at 4:15

GoogleCodeExporter commented 8 years ago
It is intended to work/compile under 1.1, but I no work with that code. There 
must have been a mix-up with it when I posted it. I'll look into it and see if 
I can actually find the old code.

Original comment by vent...@gmail.com on 19 Jul 2011 at 9:13

GoogleCodeExporter commented 8 years ago
Okay. I've updated the source code here for version 2.6.3 for .NET 1.1, and 
I've compiled a .NET 1.1 binary of that version of the module.
http://code.google.com/p/securityswitch/downloads/detail?name=SecuritySwitch%20v
2.6.3%20-%20Binary.zip

Please, note that this version is quite different from the latest. If you want 
the code to make your changes to, you can browse it in the version-2 repository 
here, or just clone it out from:
https://code.google.com/p/securityswitch.version-2/

I'll also update the binary download on the Code Project site. Thanks for 
pointing all this out!

Original comment by vent...@gmail.com on 19 Jul 2011 at 11:10