Configure Non-SSL (Development Only)

It may be desired to remove the SSL requirement during development and testing against K2 Services endpoints.  This section details the steps necessary to remove the SSL requirement.  All steps assume a default K2 installation.

IIS Settings

1. Start Internet Information Services (IIS) Manager 
2. Navigate to {Server} > Sites > K2
3. Select Bindings… and ensure there are no SSL bindings
   
4. Close the Site Bindings dialog
5. Select SSL Settings  and ensure the following
   1. Require SSL: unchecked (default)b
   2. Client Certificates
      1. Ignore: checked (default)
   
6. Navigate to {Server} > Sites > K2
7. Select Authentication and ensure the following
   1. Windows Authentication: Enabled
   2. Anonymous Authentication: Disabled
   3. Basic Authentication: Disabled  NOTE: K2 implements Basic for you
      
   4. Highlight Windows Authentication and select Providers… and ensure the following
   5. Providers: NTLM; Negotiate
   
8. Navigate to {Server} > Sites > K2 > K2Services
9. Select SSL Settings  and ensure SSL is not enabled
   1. Require SSL: unchecked (default)
   2. Client Certificates
      1. Ignore: checked (default)
   
10. Navigate to {Server} > Sites > K2 > K2Services 
11. Select Authentication and ensure the following:
    1. Windows Authentication: Enabled
    2. Anonymous Authentication: Enabled
    3. Basic Authentication: Disabled  NOTE: K2 implements Basic for you
12. Navigate to {Server} > Application Pools
13. Select K2 blackpearl and ensure the following
    1. .NET Framework Version: 2.0
    2. Pipeline mode: Classic
       

Web.config Settings

1.  Open C:\Program Files (x86)\K2 blackpearl\WebServices\K2Services\web.config
2. To support BASIC + HTTP
   1. Set the requireSSL tag to False
      <configuration>
        <sourceCode.services>
          <basicAuthentication requireSSL="False" enabled="True" cachingEnabled="True" cachingDuration="15" defaultSecurityLabel="K2" />
        </sourceCode.services>
      </configuration>
      
   2. Set the service endpoints and base addresses for HTTP
      <services>
        <service behaviorConfiguration="SourceCode.Services.RestBehavior" name="SourceCode.Services.SyncRest">
          <endpoint address="Task" behaviorConfiguration="SourceCode.Services.RestBehavior" binding="webHttpBinding" bindingConfiguration="SourceCode.Services.SyncRestBinding+HTTP" contract="SourceCode.Services.ServiceContracts.ITaskService" />
          <endpoint address="Identity" behaviorConfiguration="SourceCode.Services.RestBehavior" binding="webHttpBinding" bindingConfiguration="SourceCode.Services.SyncRestBinding+HTTP" contract="SourceCode.Services.ServiceContracts.IIdentityService" />
          <endpoint address="Core" behaviorConfiguration="SourceCode.Services.RestBehavior" binding="webHttpBinding" bindingConfiguration="SourceCode.Services.SyncRestBinding+HTTP" contract="SourceCode.Services.ServiceContracts.ICoreService" />
          <host>
            <baseAddresses>
              <add baseAddress="http://api.denallix.com:81/K2Services/WCF.svc" />
            </baseAddresses>
          </host>
        </service>
        <service behaviorConfiguration="SourceCode.Services.SoapBehavior" name="SourceCode.Services.SyncWcf">
          <endpoint address="Task" behaviorConfiguration="SourceCode.Services.SoapBehavior" binding="basicHttpBinding" bindingConfiguration="SourceCode.Services.SyncWcfBinding+HTTP" contract="SourceCode.Services.ServiceContracts.ITaskService" />
          <endpoint address="Identity" behaviorConfiguration="SourceCode.Services.SoapBehavior" binding="basicHttpBinding" bindingConfiguration="SourceCode.Services.SyncWcfBinding+HTTP" contract="SourceCode.Services.ServiceContracts.IIdentityService" />
          <endpoint address="Core" behaviorConfiguration="SourceCode.Services.SoapBehavior" binding="basicHttpBinding" bindingConfiguration="SourceCode.Services.SyncWcfBinding+HTTP" contract="SourceCode.Services.ServiceContracts.ICoreService" />
          <host>
            <baseAddresses>
              <add baseAddress="http://api.denallix.com:81/K2Services/WCF.svc" />
            </baseAddresses>
          </host>
        </service>
      </services>
      
   3. Set the security mode to TransportCredentialOnly for the endpoint bindings
   <bindings>
     <webHttpBinding>
       <binding name="SourceCode.Services.SyncRestBinding+HTTP">
         <security mode="TransportCredentialOnly">
           <transport clientCredentialType="None" />
         </security>
       </binding>
     </webHttpBinding>
     <basicHttpBinding>
       <binding name="SourceCode.Services.SyncWcfBinding+HTTP">
         <security mode="TransportCredentialOnly">
           <transport clientCredentialType="None" />
         </security>
       </binding>
     </basicHttpBinding>
   </bindings>
   
3. To support Windows + HTTP
   1. Set the service endpoints and base addresses for HTTP
      <services>
        <service behaviorConfiguration="SourceCode.Services.RestBehavior" name="SourceCode.Services.Rest">
          <endpoint address="Process" behaviorConfiguration="SourceCode.Services.RestBehavior" binding="webHttpBinding" bindingConfiguration="SourceCode.Services.RestBinding+HTTP" contract="SourceCode.Services.ServiceContracts.IProcessNavigationService" />
          <endpoint address="Worklist" behaviorConfiguration="SourceCode.Services.RestBehavior" binding="webHttpBinding" bindingConfiguration="SourceCode.Services.RestBinding+HTTP" contract="SourceCode.Services.ServiceContracts.IWorklistNavigationService" />
          <endpoint address="Identity" behaviorConfiguration="SourceCode.Services.RestBehavior" binding="webHttpBinding" bindingConfiguration="SourceCode.Services.RestBinding+HTTP" contract="SourceCode.Services.ServiceContracts.IIdentityService" />
          <endpoint address="Core" behaviorConfiguration="SourceCode.Services.RestBehavior" binding="webHttpBinding" bindingConfiguration="SourceCode.Services.RestBinding+HTTP" contract="SourceCode.Services.ServiceContracts.ICoreService" />
          <host>
            <baseAddresses>
              <add baseAddress="http://api.denallix.com:81/K2Services/WCF.svc" />
            </baseAddresses>
          </host>
        </service>
        <service behaviorConfiguration="SourceCode.Services.SoapBehavior" name="SourceCode.Services.Wcf">
          <endpoint address="Process" behaviorConfiguration="SourceCode.Services.SoapBehavior" binding="basicHttpBinding" bindingConfiguration="SourceCode.Services.WcfBinding+HTTP" contract="SourceCode.Services.ServiceContracts.IProcessService" />
          <endpoint address="Worklist" behaviorConfiguration="SourceCode.Services.SoapBehavior" binding="basicHttpBinding" bindingConfiguration="SourceCode.Services.WcfBinding+HTTP" contract="SourceCode.Services.ServiceContracts.IWorklistService" />
          <endpoint address="Identity" behaviorConfiguration="SourceCode.Services.SoapBehavior" binding="basicHttpBinding" bindingConfiguration="SourceCode.Services.WcfBinding+HTTP" contract="SourceCode.Services.ServiceContracts.IIdentityService" />
          <endpoint address="Core" behaviorConfiguration="SourceCode.Services.SoapBehavior" binding="basicHttpBinding" bindingConfiguration="SourceCode.Services.WcfBinding+HTTP" contract="SourceCode.Services.ServiceContracts.ICoreService" />
          <host>
            <baseAddresses>
              <add baseAddress="http://api.denallix.com:81/K2Services/WCF.svc" />
            </baseAddresses>
          </host>
        </service>
      </services>
      
   2. Set the security mode to TransportCredentialOnly for the endpoint bindings

Configure SSL and Non-SSL

The configuration from the SSL and Non-SSL sections can be combined to support both SSL and Non-SSL endpoints at the same K2 Services virtual directory. Review the Troubleshooting topic when combining multiple bindings.