nixCraft

simonjwoolf · #1 (**permalink**) 07-10-2009, 08:44 PM

Hi,

I am a bit stuck with how to get around lighttpd's insistence on IP-based virtual hosting when using SSL.

I have an SSL site up and running with the following configuration:
$SERVER["socket"] == "111.111.111.111:443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/ssl.key/mydomain.com.pem"
....
}

So the site URL is https://mydomain.com/

But... I want to forward any requests for https://www.mydomain.com to https://mydomain.com
as otherwise visitors will get a warning as the SSL cert will be invalid.

I can't find any way to do this - I've tried nesting an HTTP["host"] block inside
the SERVER["socket"] block, but it looks like this doesn't function at all if
the site is SSL. I also tried using HTTP["url"] but that didn't work either.

Help!

Simon.

Centos 5.2
Lighttpd 1.4.18

Serving up Django via FastCGI

nixcraft · #2 (**permalink**) 07-10-2009, 09:10 PM

Add the following lines to lighttpd.conf or your virual hosting section

Code:

$HTTP["host"] =~ "^www\.(.*)" {   url.redirect = ( "^/(.*)" => "https://%1/$1" ) }

Reload / restart lighttpd. I've same config here on this forum. If you visit http://www.nixcraft.com/ it will move to http://nixcraft.com/

HTH

simonjwoolf · #3 (**permalink**) 07-10-2009, 09:13 PM

Not quite!

I'm well aware of how to redirect http to https, but what I am asking here is how to redirect https://somevalue to https://some_other_value

This seems to be more difficult.

nixcraft · #4 (**permalink**) 07-10-2009, 09:16 PM

I'm sorry I cannot follow you. Can you be more specific and please add your example urls in [code] tags so that I can see it. Otherwise VB is "Automatically parsing links in text" and "automatically retrieving titles from external links"

simonjwoolf · #5 (**permalink**) 07-10-2009, 09:25 PM

OK, so I want all of the following options to forward to

Code:

https://sub.mydomain.com/

Code:

http://sub.mydomain.com/

Code:

http://www.sub.mydomain.com/

Code:

https://www.sub.mydomain.com/

Currently I have this in my config to handle the http > https redirects:

Code:

 
        $HTTP["host"] =~ "^(www\.)?sub\.mydomain\.com$" {
                url.redirect = ( "^/(.*)" => "https://sub.mydomain.com/$$
                server.name     = "sub.mydomain.com"
        }

But I want to know how I can handle the https > https redirect.

simonjwoolf · #6 (**permalink**) 07-10-2009, 09:27 PM

Sorry it still formatted in a way which wasn't clear!

This is the main https domain:

Code:

https://sub.mydomain.com

All the others are options which should be forwarded.

nixcraft · #7 (**permalink**) 07-10-2009, 09:37 PM

Now, I get it you want to match all http requests including subdomains and redirect them to https domains. I had something as follows for one my domain. It redirect everything from http://example.com to http://sub.example.com to https://example.com

Code:

$SERVER["socket"] == ":80" {
  $HTTP["host"] =~ "(.*)" {
    url.redirect = ( "^/(.*)" => "https://%1/$1" )
  }
}

Since I've not seen your lighttpd.conf. Above is what you needed, IMHO. Keep in mind you need to modify port 80 config and then it will work. Try out and let me know...

simonjwoolf · #8 (**permalink**) 07-10-2009, 09:40 PM

Nope, the devil is in the detail!

I know how to forward from http to https

I am having a problem forwarding from one https address to another!

It's this url

Code:

https://www.sub.mydomain.com/

which should forward to

Code:

https://sub.mydomain.com/

that I am struggling with

nixcraft · #9 (**permalink**) 07-10-2009, 10:45 PM

Try selecting and matching https with $HTTP["scheme"] directive:

Code:

$HTTP["scheme"] == "https" {
    ....
}

Example:

Code:

$HTTP["scheme"] == "https" {
        url.redirect = ("^/(isoimages/.*)" => "https://%1/$1")
}

This only works with lighttpd version 1.4.19 or above.

simonjwoolf · #10 (**permalink**) 07-10-2009, 11:14 PM

OK, I'm currently on 1.4.18 so when I get the chance to upgrade I'll give this a shot - thanks!

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Linux IP forwarding	varunkant	Linux software	2	08-07-2008 04:15 PM
DNS: Conditional Forwarding	marros	Getting started tutorials	1	04-07-2008 01:36 AM
Port forwarding	satimis	Networking, Firewalls and Security	0	02-02-2008 07:45 AM
https error	surmandal	Web servers	0	11-10-2007 12:22 PM
SSH via HTTPs ?	rcordeiro	Linux software	5	23-06-2006 05:42 PM

nixCraft

forwarding https://www.xxx to https://xxx in lighttpd

forwarding https://www.xxx to https://xxx in lighttpd

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads