You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Farid Izem <fa...@gmail.com> on 2011/03/11 19:27:40 UTC
[users@httpd] Filtering HTTPS Access
Hi,
I'm currently working on a configuration to force HTTPS by directory.
Configuration looks like :
<Directory /home/user/apache_data/htdocs>
SSLOptions StrictRequire
SSLRequireSSL
ErrorDocument 403 https://mywebserver.fr.world.socgen
</Directory>
This configuration works perfectly. But i'd like to allow HTTP
connection to a particular set of IP,
for example keepalive from load balancer which are perform only in HTTP.
First solution would be to change load balancer to make keepalive over
HTTPS. I have no money.
Second solution, redirect HTTP to HTTPS using Rewrite engine whereas
using SSLRequireSSL and ErrorDocument.
Already done and validated.
I want to avoid RewriteRule usage. I d'like to used SSLRequire with
some conditions.
Is it possible with
<Directory /home/user/apache_data/htdocs>
SSLOptions StrictRequire
SSLRequireSSL
SSLRequire ( %{REMOTE_ADDR} !~ m/192\.172\.10\.[1-2]/)
ErrorDocument 403 https://mywebserver.fr.world.socgen
</Directory>
It is not working.Can you help me please ? is SSLRequire only used in
HTTPS context only ?
Regards,
Farid
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Filtering HTTPS Access
Posted by Devraj Mukherjee <de...@gmail.com>.
Is there a reason you dont want to use Rewrite rules?
On Sat, Mar 12, 2011 at 5:27 AM, Farid Izem <fa...@gmail.com> wrote:
> Hi,
>
> I'm currently working on a configuration to force HTTPS by directory.
> Configuration looks like :
>
> <Directory /home/user/apache_data/htdocs>
> SSLOptions StrictRequire
> SSLRequireSSL
> ErrorDocument 403 https://mywebserver.fr.world.socgen
> </Directory>
>
> This configuration works perfectly. But i'd like to allow HTTP
> connection to a particular set of IP,
> for example keepalive from load balancer which are perform only in HTTP.
>
> First solution would be to change load balancer to make keepalive over
> HTTPS. I have no money.
> Second solution, redirect HTTP to HTTPS using Rewrite engine whereas
> using SSLRequireSSL and ErrorDocument.
> Already done and validated.
>
> I want to avoid RewriteRule usage. I d'like to used SSLRequire with
> some conditions.
>
> Is it possible with
>
> <Directory /home/user/apache_data/htdocs>
> SSLOptions StrictRequire
> SSLRequireSSL
> SSLRequire ( %{REMOTE_ADDR} !~ m/192\.172\.10\.[1-2]/)
> ErrorDocument 403 https://mywebserver.fr.world.socgen
> </Directory>
>
> It is not working.Can you help me please ? is SSLRequire only used in
> HTTPS context only ?
>
> Regards,
>
> Farid
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org