I've got a site that is using an Execute URL in the 403.4 error page slot that calls a page named forcessl.aspx. Here's the contents of the file:
strWork = Replace(strQUERY_STRING, "http", "https") strWork = Replace(strWork, "403;", "") strWork = Replace(strWork, "80", "") strSecureURL = strWork Response.Write(strSecureURL) Response.Redirect(strSecureURL) Catch ex As Exception End Try End If %>
This particular site gets a 401.1 error if
https:// is not added to the URL. I have several other sites using the same method that work fine and this one mirrors those in all ways that I can tell (folder permissions, etc). This new site is just a subdomain of the same domain that the other sites are using. The main domain has a wildcard SSL cert.
From Microsoft's documentation, here is the meaning of the errors:
HTTP Error 403.4 - Forbidden: SSL Is Required To View This Resource
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials