Linux – Redirect HTTPS traffic without changing the HOSTS file

bashcurlhttpslinux

I have a website hosted on 2 servers.
The website is SSL based.

I'd like to monitor (load the main page and look for a certain string) the website per server using a local Opsview.
Meaning I need to go Opsview's HOSTS file and add "domain.com 10.10.10.33" and change it each time to match the right server.
I obviously cant script this as the results are very likely to be skewed during the check.

Is there some sort of a crawler for Linux that's capable of taking an IP address, domain name and work them together? I tried both curl –proxy and wget –header to no avail.

Best Answer

Many SSL http servers don't care what Host: header is supplied, so simply requesting https://$ipaddress/foo should work, as long as you can convince the client (e.g. wget) to ignore the certificate CN mismatch.

Otherwise try something like:

(echo -e 'GET /foo HTTP/1.0\r\nHost: domain.com\r\n\r'; sleep 2) | openssl s_client -connect 10.10.10.33:443 | grep "a certain string"

Related Solutions

Redirect https to another https

You can do this, both sites need to have a valid SSL certificate. This way browsers won't give a security pop-up. If both sites exist at the same server however, both domains need to be hosted from different IP addresses.

A web server looks at the "Host" header in the HTTP request to see which site it needs to serve. The SSL negotiation happens before the HTTP request is sent, so at that point the web server can't tell which website it will display. It will always send the same certificate to the browser.

There are two ways to work around this:

Have a wildcard certificate for *.example.com, so all subdomains can share the same certificate.
Run each SSL site at a different IP address. This way, the web server knows which SSL certificate it can send to the browser, by inspecting the IP address which received the incoming connection.

Note it's perfectly possible to attach multiple IP addresses to the same network adapter, it's just that you need a second IP address available in your IP address space.

Update: Nowadays, you can run multiple SSL sites at a single IP. To enable this, configure SNI support at your web server. Most modern browsers (except windows XP, and Android 2) support this.

Apache SSL – Is It Bad to Redirect HTTP to HTTPS?

The [R] flag on its own is a 302 redirection (Moved Temporarily). If you really want people using the HTTPS version of your site (hint: you do), then you should be using [R=301] for a permanent redirect:

RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R=301,L]

A 301 keeps all your google-fu and hard-earned pageranks intact. Make sure mod_rewrite is enabled:

a2enmod rewrite

To answer your exact question:

Is it bad to redirect http to https?

Hell no. It's very good.

Best Answer

Related Solutions

Redirect https to another https

Apache SSL – Is It Bad to Redirect HTTP to HTTPS?

Related Topic