Ssl – Redirect Subdomain That is Not on SSL

apache-2.4httpsredirectsslsubdomain

I have a SSL certificate that is installed on the server that only covers the domain, not subdomains

All traffic is redirected using apache config file

When I set up the subdomain to redirect a subdomain you get the browser alerting you that the site isn't safe because the SSL doesn't match the domain. I want to catch the subdomain before it gets forced to HTTPS and redirect it to where I need it to go because once its forced to HTTPS it throws an error

My apache config

<VirtualHost *:80>
   ServerName aliahealthcare.com
   Redirect permanent / https://aliahealthcare.com/
</VirtualHost>
<VirtualHost *:443>
     //blah
</VirtualHost>

Best Answer

Thankfully, SSL doesn't work that way. Every new domain you go to will have a new DNS lookup and a new SSL handshake and the certificate will be verified each time. If you think about it, that's a really good thing for security! (Despite inconveniencing you in this situation)

Your best bet is to get a wildcard cert or use Subject Alternate Names.

Related Solutions

Ssl – Apache SSL New Domain Redirect

Given that the rewrite/redirect doesn't happen until after the user has made a request, it makes perfect sense that HTTPS requests to a site with the wrong SSL certificate provoke a browser warning.

The correct way to handle this is to have two separate SSL vhosts, on separate IPs, each configured with their own SSL certificate. Then, in the olddomain vhost, setup your redirects as you want them.

Lighttpd Redirect to SSL results in 301 redirect loop

Taking a look at my configuration, which is almost the same as you:

I want https
and http redirect to https.

I have one more things inside my socket config:

$SERVER["socket"] == ":443" {
        ssl.engine  = "enable"

        # .....

        setenv.add-environment = (
                "HTTPS" => "on"
        )
}

And my redirect is handled outside the first host, like this:

$HTTP["scheme"] == "http" {
        $HTTP["host"] =~ "site.example.fr" {
                url.redirect = ( "^/(.*)" => "https://site.example.fr/$1" )
        }
}

And every thing works like a charm.

Best Answer

Related Solutions

Ssl – Apache SSL New Domain Redirect

Lighttpd Redirect to SSL results in 301 redirect loop

Related Topic