You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Brandon Gillespie <gi...@iomega.com> on 2002/03/28 17:34:25 UTC
How to build https:// redirects without SSL?
We are using a load balancer (BigIP) to do our SSL, so by the time
apache receives the request it is plain HTTP. In general this isn't a
problem, except for when somebody hits a directory without a trailing
slash--then apache redirects them to 'http://website:443'; where we want
it to redirect to 'https://website/' (the port being optional).
I have sifted docs, forums and even the source code. I am not certain
there is a way to do this easilly. Does anybody have a recommendation?
I would be surprised if I were the first one to have to deal with this
problem (ssl-offloading is fairly common on larger sites).
-Brandon Gillespie
--
Phone/Fax: 801 332 4260
Mobile: 801 826 9587
gillespie@iomega.com
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: How to build https:// redirects without SSL?
Posted by Brandon Gillespie <gi...@iomega.com>.
Gilles GROS wrote:
> try to look at the access log and error log of apache to see if the addition
> of the :443 is made by the load balancer or not.
The problem isn't :443, the problem is apache builds the URL for the
redirect with 'http://' schema, not 'https://' schema. The port is
correct, and apache is the one adding it, as I can verify with manual
queries...
--
Phone/Fax: 801 332 4260
Mobile: 801 826 9587
gillespie@iomega.com
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: How to build https:// redirects without SSL?
Posted by Gilles GROS <gi...@whitepj.com>.
try to look at the access log and error log of apache to see if the addition
of the :443 is made by the load balancer or not.
> -----Original Message-----
> From: Brandon Gillespie [mailto:gillespie@iomega.com]
> Sent: Thursday, March 28, 2002 10:01 AM
> To: users@httpd.apache.org
> Subject: Re: How to build https:// redirects without SSL?
>
>
> Gilles GROS wrote:
> > I understand, but which pieces are dong what?
> >
> > https://website/directory/
> > goes thru load balancer and become :
> > http://website/directory/
> > and is served ?
>
> Yes.
>
>
> --
> Phone/Fax: 801 332 4260
> Mobile: 801 826 9587
> gillespie@iomega.com
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: How to build https:// redirects without SSL?
Posted by Brandon Gillespie <gi...@iomega.com>.
Gilles GROS wrote:
> I understand, but which pieces are dong what?
>
> https://website/directory/
> goes thru load balancer and become :
> http://website/directory/
> and is served ?
Yes.
--
Phone/Fax: 801 332 4260
Mobile: 801 826 9587
gillespie@iomega.com
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: How to build https:// redirects without SSL?
Posted by Gilles GROS <gi...@whitepj.com>.
I understand, but which pieces are dong what?
https://website/directory/
goes thru load balancer and become :
http://website/directory/
and is served ?
That is the sense of my question.
Gilles
> -----Original Message-----
> From: Brandon Gillespie [mailto:gillespie@iomega.com]
> Sent: Thursday, March 28, 2002 9:42 AM
> To: users@httpd.apache.org
> Subject: Re: How to build https:// redirects without SSL?
>
>
> Gilles GROS wrote:
> > Put some light on the folowing:
> >
> > When you request:
> > https://website/directory/ where are you redirected ?
> > Which pieces are doing the redirection ?
>
>
> You are not redirected--that will serve up the index.html for the
> directory. If you request the same URL without the slash, it redirects
> you to the same URL with a slash appended.
>
> --
> Phone/Fax: 801 332 4260
> Mobile: 801 826 9587
> gillespie@iomega.com
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: How to build https:// redirects without SSL?
Posted by Brandon Gillespie <gi...@iomega.com>.
Gilles GROS wrote:
> Put some light on the folowing:
>
> When you request:
> https://website/directory/ where are you redirected ?
> Which pieces are doing the redirection ?
You are not redirected--that will serve up the index.html for the
directory. If you request the same URL without the slash, it redirects
you to the same URL with a slash appended.
--
Phone/Fax: 801 332 4260
Mobile: 801 826 9587
gillespie@iomega.com
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: How to build https:// redirects without SSL?
Posted by Gilles GROS <gi...@whitepj.com>.
Put some light on the folowing:
When you request:
https://website/directory/ where are you redirected ?
Which pieces are doing the redirection ?
Gilles
> -----Original Message-----
> From: Brandon Gillespie [mailto:gillespie@iomega.com]
> Sent: Thursday, March 28, 2002 9:01 AM
> To: users@httpd.apache.org
> Subject: Re: How to build https:// redirects without SSL?
>
>
> Gilles GROS wrote:
> > May be where you should investigate is why Apache is doing a redirection
> > from : http://website/test_dir to http://website:443
>
> It is normal directory trailing-slash redirect... such as a request:
>
> https://website/directory
>
> (without trailing slash) and it redirects to:
>
> http://website:443/directory/
>
> (with trailing slash, but not https)
>
> -Brandon Gillespie
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: How to build https:// redirects without SSL?
Posted by Brandon Gillespie <gi...@iomega.com>.
Gilles GROS wrote:
> May be where you should investigate is why Apache is doing a redirection
> from : http://website/test_dir to http://website:443
It is normal directory trailing-slash redirect... such as a request:
https://website/directory
(without trailing slash) and it redirects to:
http://website:443/directory/
(with trailing slash, but not https)
-Brandon Gillespie
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
AuthDBMUserFile Problems!!!
Posted by "F. J. Pedro" <pe...@yahoo.com>.
Hi all,
Note: Please help me. You are my last oportunity. I
was search in Apache Docs, GOOGLE, another guys, BUT
NOTHING! Please help me.
Problem: "AuthDBMUserFile"
Message from http_error:
/* Begin of message
[Thu Mar 28 22:16:28 2002] [error] [client
192.168.1.1] (2)No such file or directory: could not
open dbm auth file:
/var/webhosting/peterflor/files/users
[Thu Mar 28 22:16:28 2002] [error] [client
192.168.1.1] DBM user peterflor not found:
/var/webhosting/peterflor/www/admin/phpmyadmin/index.php
"
End of Message */
Some details:
1) Apache_1.3.22 + SSL & PPH-4.2 & GDBM moudule suport
2) I have "dbmmanage" perl program
3) I am using Virtual Hosts
4) My virtual host configuration is:
DocumentRoot /var/webhosting/peterflor/www/
ServerName peterflor.dominio-v
3) The directory that i want restrict
<Directory /var/webhosting/peterflor/www/admin>
AuthName Administracion
AuthType Basic
AuthUserFile
/var/webhosting/peterflor/files/users
Require valid-user
</Directory>
4) The place of <users/passwords> file
$ ls -alF
-rw-r--r-- 1 peterf peterf 12288 Mar 28 00:21
/var/webhosting/peterflor/files/users
P.D.
When i try with "AuthUserFile" (Plain Text) all works
fine (dejavu)!
Thank for all.
=====
J. Pedro Flor P.
.~.
/V\
// \\
/( _ )\
´´ ``
_________________________________________________________
Do You Yahoo!?
Información de Estados Unidos y América Latina, en Yahoo! Noticias.
Visítanos en http://noticias.espanol.yahoo.com
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: How to build https:// redirects without SSL?
Posted by Gilles GROS <gi...@whitepj.com>.
May be where you should investigate is why Apache is doing a redirection
from : http://website/test_dir to http://website:443
Regards
Gilles
> -----Original Message-----
> From: Brandon Gillespie [mailto:gillespie@iomega.com]
> Sent: Thursday, March 28, 2002 8:34 AM
> To: users@httpd.apache.org
> Subject: How to build https:// redirects without SSL?
>
>
> We are using a load balancer (BigIP) to do our SSL, so by the time
> apache receives the request it is plain HTTP. In general this isn't a
> problem, except for when somebody hits a directory without a trailing
> slash--then apache redirects them to 'http://website:443'; where we want
> it to redirect to 'https://website/' (the port being optional).
>
> I have sifted docs, forums and even the source code. I am not certain
> there is a way to do this easilly. Does anybody have a recommendation?
> I would be surprised if I were the first one to have to deal with this
> problem (ssl-offloading is fairly common on larger sites).
>
> -Brandon Gillespie
> --
> Phone/Fax: 801 332 4260
> Mobile: 801 826 9587
> gillespie@iomega.com
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org