Ssl – How to redirect http to https for IP and domain on Apache2

apache-2.2httpsredirectsslubuntu-12.04

I have an Apache2 web server running on Ubuntu 12.04. The domain of the website that I am hosting works fine, and if you go to the http version instead of the https version, it automatically redirects to the https version of the domain.

However, if I go to the http version of the ip address of the domain, it does not automatically redirect to the https version of the ip address.

There is nothing in the .htaccess or httpd.conf file.

I have tried adding a redirect for the ip specifically in the .htaccess file, but it does not work properly and the when I visit the domain, it says there are too many redirects.

I have a default-ssl file and website file in the sites-enabled folder. The default-ssl has virtual host config for port 443 and the ServerName

The website file has virtual host config for port 80, but no ServerName

Both files have the same DocumentRoot

How do enable the https redirect for the ip address as well, not only the domain?

Best Answer

If you want redirect all :80 visits excluding those to http://example.com:

<VirtualHost _default_:80>
     RewriteEngine On
     RewriteCond %{HTTP_HOST} !^example.com$
     RewriteRule /.* https://example.com/ [R]
</VirtualHost>

If you want to redirect even the ones that go to http://example.com, do the following:

<VirtualHost _default_:80>
     RewriteEngine On
     RewriteRule /.* https://example.com/ [R]
</VirtualHost>

Obviously, if you have other VirtualHost stanzas, it may never reach the _default_ one.

Hope this helps!

Correct way in new versions of nginx

Turn out my first answer to this question was correct at certain time, but it turned into another pitfall - to stay up to date please check Taxing rewrite pitfalls

I have been corrected by many SE users, so the credit goes to them, but more importantly, here is the correct code:

server {
       listen         80;
       server_name    my.domain.com;
       return         301 https://$server_name$request_uri;
}

server {
       listen         443 ssl;
       server_name    my.domain.com;
       # add Strict-Transport-Security to prevent man in the middle attacks
       add_header Strict-Transport-Security "max-age=31536000" always; 

       [....]
}

Ssl – Redirect http to https apache on different port

I know that you can redirect 80 to 443 ssl, those are different ports. But in my case i want to serve everything on this port (82) via ssl. Maybe its possible to do it with playing custom error page since its showing an error page when i use http on this port but i don't know how

You can't host both encrypted and plain-text over the same port. If someone connects to the plain-text port say port 80 or 81, then you can forward them to your HTTPS port say 82 in this example. So something like this should do the trick:

# Plain-text rewrite:
<VirtualHost *:81>
DocumentRoot "/var/www/site"
RewriteEngine on
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}:82%{REQUEST_URI}
<Directory "/var/www/site">
allow from all
Options -Indexes
</Directory>
</VirtualHost>

# SSL config
<VirtualHost *:82>
SSLEngine on
SSLCertificateFile /etc/ssl/certs/cert.pem
DocumentRoot "/var/www/site"
<Directory "/var/www/site">
allow from all
Options -Indexes
</Directory>
</VirtualHost>

In this case any user connecting to port 81 would get forwarded to port 82. Anyone connecting to port 82 will be over SSL.

Best Answer

Related Solutions

Nginx – In Nginx, how can I rewrite all http requests to https while maintaining sub-domain

Correct way in new versions of nginx

Ssl – Redirect http to https apache on different port

Related Topic