Lighttpd redirect https to http

lighttpd

After two days of searching, I decided to ask this question here:

I have extremely limited lighttpd installed on my iDevice, and I need to redirect all received https traffic to http. I don't have mod_rewrite nor do I have ssl compiled in.

I came up with this, but it doesn't seem to work:

$SERVER["socket"] == ":443" {
 $HTTP["host"] =~ ".*" {
  url.redirect = ( ".*" => "http://%1" )
 }
}

Also, for lighttpd to get the port 443 traffic, do I need to set server.port to 443, or can I just leave it = 80 in the config file?

Thanks in advance!

Best Answer

If you're not using SSL, then your version of lighttpd will be unable to respond to an incoming HTTPS request as it will be unable to decode the response (which will be SSL encrypted by the client's browser).

It will also be unable to reply over HTTPS with the Redirect reply.

You'll need to compile Lighttpd with SSL support, or put at least something in there on port 443 which can decrypt SSL (perhaps openssl with the s_server option in HTTPS mode).

Related Solutions

Lighttpd: redirect traffic from http to https on *.domain.tdl

If I understand right, you'd want to take, say, example.com and redirect not for example.com, but for all of its subdomains?

This should do it:

$HTTP["host"] =~ "^(.*\.example\.com)$" {
  url.redirect = ( "^/(.*)" => "https://%1/$1" )
}

Redirecting HTTPS requests to http in lighttpd

I have used this one:

$HTTP["scheme"] == "https" {
        $HTTP["host"] =~ "example.com" {
                url.redirect = ( "^/(.*)" => "http://www.example.com/$1" )
        }
}

But be careful, some browser keep in mind that a website use https. So it will always try to access the https version no matter the redirect that send the webserver. I have tried this case and Firefox / Chrome told me that my website goes into an infite redirect loop. But when I curl my website on https, I got a 301 to http. And on http a 200.

So it's hard to test ...

For your second question, it's in the doc:

Note that the "%1" in the url.redirect target refers to the parenthesized subexpression in the conditional regexp (.*). It does not necessarily have the meaning that "%1" would have in evhost.path-pattern (where it would mean 'top-level domain'). If url.redirect is specified within a regex conditional, % patterns are replaced by the corresponding groups from the condition regex. %1 is replaced with the first subexpression, %2 with the second, etc. %0 is replaced by the entire substring matching the regexp. See above and below for examples using % patterns.

Best Answer

Related Solutions

Lighttpd: redirect traffic from http to https on *.domain.tdl

Redirecting HTTPS requests to http in lighttpd

Related Topic