Last post Sep 21, 2015 11:39 AM by Illeris
Sep 17, 2015 08:24 AM|uid829402|LINK
I have an internal site calling an internal Web API Service, the site is using HTTPS and the API is running under HTTP, is there a way I can call the HTTP service from my HTTP site without going through hoops in getting a cert for it? Its our dev server
hosting the API right now and the network group won't create/get a cert so it can run under HTTPS.
Sep 17, 2015 08:37 AM|PatriceSc|LINK
Calling an http service from an https web site should not be a problem if done server side. It is likeky a problem if done client side. You should be able to create a self signed certificate and register it explicitely in your browser which would allow testing
this. For example
As the situation is not 100% clear (in particular if "calling from a web site" means a server side or client side call), I would suggest to try and tell what happens. It should be then easier to help based on the current situation.
Sep 17, 2015 08:43 AM|uid829402|LINK
I'm calling the service using an AJAX call. I'm trying to avoid creating a server side call for this at all cost. Long story, but if I can get this working from an client side AJAX call, the better it'll be
Sep 21, 2015 11:39 AM|Illeris|LINK
Try enabling CORS : http://www.asp.net/web-api/overview/security/enabling-cross-origin-requests-in-web-api
This should do the trick for you.