You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Francisco Javier Morales López de Gamarra <fm...@hotmail.com> on 2010/03/05 08:28:22 UTC
[users@httpd] RE: Question about HTTPS without SSL???
So something like this is not possible? and apache answer
<VirtualHost *:443>
ServerName www.mydomain.com
CustomLog /var/log/apache2/access.log combined
ErrorLog /var/log/apache2/error.log
DocumentRoot /var/www/web/portal
SSLEngine off
#####################################################
</VirtualHost>
I am trying but I have this in my logs...
/0.9.8c (internal dummy connection)"
::1 - - [05/Mar/2010:08:17:05 +0100] "GET / HTTP/1.0" 302 - "-" "Apache/2.2.3 (Debian) PHP/4.4.4-8+etch6 mod_ssl/2.2.3 OpenSSL/0.9.8c (internal dummy connection)"
Assumed that is how apache works
> From: fmorales_htw@hotmail.com
> To: users@httpd.apache.org
> Subject: Question about HTTPS without SSL???
> Date: Thu, 4 Mar 2010 23:07:30 +0100
>
>
>
> Hello.
>
> I am trying to redirect HTTPS connections to HTTP like:
>
> https:www.mydomain.com -> http:www.mydomain.com (but I need not to show the invalid certificate page)
>
> I simply try:
>
> RewriteCond %{HTTP_HOST} ^www.mydomain.com [NC]
> RewriteRule ^(.*)$ http://www.mydomain.com/$1 [L,R=301]
>
> My problem is that browser show that I dont have a valid certificate for my first SSL connection....
>
> There is a way for to redirect HTTPS before SSL or make any ... for not to show this "not valid certificate page" to the user?
>
> I am trying to setup a virtual domain on the 443 port with the SSLengine off but it does not works.
>
> Any idea?, any help would be very apreciated.
>
> Thanks a lot
> ---
> Francisco Javier Morales López de Gamarra
> Malaga - Spain
> _________________________________________________________________
> Ahora Messenger en tu Blackberry® 8520 con Movistar por 0 €. ¿A qué esperas?
> http://serviciosmoviles.es.msn.com/messenger/blackberry.aspx
_________________________________________________________________
Escucha a quienes ya han probado Windows 7 ¡Hazlo aquí!
http://www.sietesunpueblodeexpertos.com/index_windows7.html
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: [users@httpd] RE: Question about HTTPS without SSL???
Posted by Francisco Javier Morales López de Gamarra <fm...@hotmail.com>.
Sorry, forget my last email ... I have just undestand what you say.
Thanks a lot
----------------------------------------
> Date: Fri, 5 Mar 2010 08:45:14 +0000
> From: phil@philipwigg.co.uk
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] RE: Question about HTTPS without SSL???
>
> On 5 March 2010 08:00, Francisco Javier Morales López de Gamarra
> wrote:
>>
>> Because ..... could I try to use a ErrorDocument or Redirect 302
>>
>> directive for inform that the page is not available and that try woth no ssl address?
>
> It's not possible because the SSL negotiation takes place before the
> HTTP request. So to send a page of HTML, or a 301 or 302 redirect then
> you'd already have to have completed the SSL negotiation and this
> means that the user will already have been warned if you don't have a
> valid SSL certificate.
>
> Turning SSLEngine too 'off' won't help either as a browser connecting
> to a https site is expecting SSL so you'll just get an error. There
> really is no way to avoid getting the browser warning if you don't
> have a valid cert, whilst still connecting with SSL.
>
> Cheers,
> Phil.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
_________________________________________________________________
Recibe en tu móvil un SMS con tu Hotmail recibido. ¡Date de alta ya!
http://serviciosmoviles.es.msn.com/
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: [users@httpd] RE: Question about HTTPS without SSL???
Posted by Francisco Javier Morales López de Gamarra <fm...@hotmail.com>.
Ok, but Could I disable SSL with SSLEngine off and define and Errorpage
for this condition and show it?
Because now, I can see on the log that a "302" code is answered... so I would like to redirecto
to a no HTTPS url or inform user with a no ssl page
192.168.15.65 - - [05/Mar/2010:09:49:43 +0100] "\x16\x03\x01" 302 - "-" "-"
192.168.15.65 - - [05/Mar/2010:09:49:43 +0100] "\x16\x03" 302 - "-" "-"
Could I define a 302 error page ? with ErrorDocumet or try Redirect 302 ...
I am trying and it does not works...
Thanks a million and sorry my insistence
----------------------------------------
> Date: Fri, 5 Mar 2010 08:45:14 +0000
> From: phil@philipwigg.co.uk
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] RE: Question about HTTPS without SSL???
>
> On 5 March 2010 08:00, Francisco Javier Morales López de Gamarra
> wrote:
>>
>> Because ..... could I try to use a ErrorDocument or Redirect 302
>>
>> directive for inform that the page is not available and that try woth no ssl address?
>
> It's not possible because the SSL negotiation takes place before the
> HTTP request. So to send a page of HTML, or a 301 or 302 redirect then
> you'd already have to have completed the SSL negotiation and this
> means that the user will already have been warned if you don't have a
> valid SSL certificate.
>
> Turning SSLEngine too 'off' won't help either as a browser connecting
> to a https site is expecting SSL so you'll just get an error. There
> really is no way to avoid getting the browser warning if you don't
> have a valid cert, whilst still connecting with SSL.
>
> Cheers,
> Phil.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
_________________________________________________________________
Recibe en tu móvil un SMS con tu Hotmail recibido. ¡Date de alta ya!
http://serviciosmoviles.es.msn.com/
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] RE: Question about HTTPS without SSL???
Posted by Philip Wigg <ph...@philipwigg.co.uk>.
On 5 March 2010 08:00, Francisco Javier Morales López de Gamarra
<fm...@hotmail.com> wrote:
>
> Because ..... could I try to use a ErrorDocument or Redirect 302
>
> directive for inform that the page is not available and that try woth no ssl address?
It's not possible because the SSL negotiation takes place before the
HTTP request. So to send a page of HTML, or a 301 or 302 redirect then
you'd already have to have completed the SSL negotiation and this
means that the user will already have been warned if you don't have a
valid SSL certificate.
Turning SSLEngine too 'off' won't help either as a browser connecting
to a https site is expecting SSL so you'll just get an error. There
really is no way to avoid getting the browser warning if you don't
have a valid cert, whilst still connecting with SSL.
Cheers,
Phil.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: [users@httpd] RE: Question about HTTPS without SSL???
Posted by Francisco Javier Morales López de Gamarra <fm...@hotmail.com>.
Because ..... could I try to use a ErrorDocument or Redirect 302
directive for inform that the page is not available and that try woth no ssl address?
----------------------------------------
> From: fmorales_htw@hotmail.com
> To: users@httpd.apache.org
> Date: Fri, 5 Mar 2010 08:28:22 +0100
> Subject: [users@httpd] RE: Question about HTTPS without SSL???
>
>
> So something like this is not possible? and apache answer
>
>
> ServerName www.mydomain.com
> CustomLog /var/log/apache2/access.log combined
> ErrorLog /var/log/apache2/error.log
> DocumentRoot /var/www/web/portal
> SSLEngine off
> #####################################################
>
>
> I am trying but I have this in my logs...
>
> /0.9.8c (internal dummy connection)"
> ::1 - - [05/Mar/2010:08:17:05 +0100] "GET / HTTP/1.0" 302 - "-" "Apache/2.2.3 (Debian) PHP/4.4.4-8+etch6 mod_ssl/2.2.3 OpenSSL/0.9.8c (internal dummy connection)"
>
> Assumed that is how apache works
>
>
>
>
>> From: fmorales_htw@hotmail.com
>> To: users@httpd.apache.org
>> Subject: Question about HTTPS without SSL???
>> Date: Thu, 4 Mar 2010 23:07:30 +0100
>>
>>
>>
>> Hello.
>>
>> I am trying to redirect HTTPS connections to HTTP like:
>>
>> https:www.mydomain.com -> http:www.mydomain.com (but I need not to show the invalid certificate page)
>>
>> I simply try:
>>
>> RewriteCond %{HTTP_HOST} ^www.mydomain.com [NC]
>> RewriteRule ^(.*)$ http://www.mydomain.com/$1 [L,R=301]
>>
>> My problem is that browser show that I dont have a valid certificate for my first SSL connection....
>>
>> There is a way for to redirect HTTPS before SSL or make any ... for not to show this "not valid certificate page" to the user?
>>
>> I am trying to setup a virtual domain on the 443 port with the SSLengine off but it does not works.
>>
>> Any idea?, any help would be very apreciated.
>>
>> Thanks a lot
>> ---
>> Francisco Javier Morales López de Gamarra
>> Malaga - Spain
>> _________________________________________________________________
>> Ahora Messenger en tu Blackberry® 8520 con Movistar por 0 €. ¿A qué esperas?
>> http://serviciosmoviles.es.msn.com/messenger/blackberry.aspx
> _________________________________________________________________
> Escucha a quienes ya han probado Windows 7 ¡Hazlo aquí!
> http://www.sietesunpueblodeexpertos.com/index_windows7.html
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
_________________________________________________________________
Recibe en tu móvil un SMS con tu Hotmail recibido. ¡Date de alta ya!
http://serviciosmoviles.es.msn.com/
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org