RewriteRule not working for apache https request

apache-2.2

We have requirement to convert all http requests to https requests and append .xyz.com to the server name. For that i have written the following rule which is working for http requests but does not work for https requests.

RewriteRule ^(.*)$ https://%{SERVER_NAME}\.xyz.com%{REQUEST_URI} [R]

If I type http:// lvldraspnetserv01, it redirects to https:// lvldraspnetserv01.xyz.com as required.

However, if I type https:// lvldraspnetserv01 it does not redirect to https:// lvldraspnetserv01.xyz.com, causing the certificate to fail.

Best Answer

Try it like this:

RewriteCond %{HTTPS} on
RewriteCond %{HTTP_HOST} **Insert current condition here ***
RewriteRule ^(.*)$ https://%{SERVER_NAME}\.xyz.com%{REQUEST_URI} [R]

RewriteCond %{HTTPS} off
RewriteCond %{HTTP_HOST} **Insert current condition here, but for https***
RewriteRule ^(.*)$ https://%{SERVER_NAME}\.xyz.com%{REQUEST_URI} [R]

Related Solutions

Apache 2.2 SSL – Redirect from HTTPS to HTTPS

Please be aware that the SSL handshake and verification process of the underlying HTTPS connection occurs before the actual request is sent. That means no HTTP response from the server before the authenticity of the server certificate has been verified, not even redirects.

If you only have one endpoint (ie. only 1 public IP address), you'll need to buy a SAN certificate, that is, a certificate with Subject Alternative Names.

That way you could have a wildcard certificate for *.domain.net with the SAN www.domain.com, and you won't get any certificate warnings

For further info, check out an old answer I gave for a similar situation, just with nginx instead of apache

Redirect apache to http requests to https except for when request is a POST

Add a new RewriteCond line:

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteCond %{REQUEST_METHOD} !^POST$
RewriteRule ^/?(.*) https:// %{SERVER_NAME}/$1 [R,L]

Best Answer

Related Solutions

Apache 2.2 SSL – Redirect from HTTPS to HTTPS

Redirect apache to http requests to https except for when request is a POST

Related Topic