Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
From: Stefan Eissing <stefan.eissing@greenbytes.de>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Subject: Re: Listen 443 https
Date: Thu, 14 Sep 2017 15:40:06 +0200
References: <678BA83E-09F8-4216-9F8A-675176BEDCCB@greenbytes.de>
 <b1548aed-7281-9935-0335-8c6e8867409b@thelounge.net>
 <CACsi251k9WUKJ6G1FhvoGrz+JZRWOPpbhqbOVYjekD6=9=7NMA@mail.gmail.com>
 <CACsi252vHTEBMuoR4GHOgTicXWqA+SFJsWJnV_PdCSwP3HRJmw@mail.gmail.com>
 <6e56dd9f-ad70-2a7c-871a-cfa257b951c4@thelounge.net>
 <899554e7-2665-6ad5-9f4a-377982aa9d7e@thelounge.net>
To: dev@httpd.apache.org
In-Reply-To: <899554e7-2665-6ad5-9f4a-377982aa9d7e@thelounge.net>
Message-Id: <394E5AFD-478F-4D59-B17F-0640D38C54F5@greenbytes.de>
archived-at: Thu, 14 Sep 2017 13:40:19 -0000

Harald,

could you check if a configuration like:

  UseCanonicalPhysicalPort on

in the server or vhost mitigates the problem?

Cheers,

Stefan

> Am 14.09.2017 um 12:00 schrieb Reindl Harald <h.reindl@thelounge.net>:
>=20
>=20
>=20
> Am 10.08.2017 um 18:22 schrieb Reindl Harald:
>>> If you want to experiment...
>>> <VirtualHost IP:80 IP:443>
>>> is already recognized
>> but with "SSLEngine On" and "SSLCertificateFile" configured non-https =
no longer would work
>=20
> OK, figured it out
>=20
> * you need the *first* vhost with "SSLEngine On"
> * others can have "SSLEngine optional" and listen to 80 and 443
>=20
> but there is a bug: =
https://bz.apache.org/bugzilla/show_bug.cgi?id=3D61519
>=20
> if the trailing slash is missing in the url the automatic redirect to =
the full qualified folder-path points to http:// instead https:// and =
that does not happen within a vhost dedicated to :443 and "SSLEngine On"
>=20
> i was trapped in a endless loop because the php script making a =
redirect to https:// had a bug and missed the traling / too
>=20
> <VirtualHost *:80 *:443>
> DocumentRoot "/www/contentlounge"
> ServerName contentlounge.rhsoft.net
> SSLEngine optional
> SSLCertificateFile "conf/ssl/rhsoft.net.pem"
> </VirtualHost>
>=20
> [harry@srv-rhsoft:~]$ curl --head --insecure https://contentlounge/cms
> HTTP/1.1 301 Moved Permanently
> Date: Thu, 14 Sep 2017 09:40:27 GMT
> X-DNS-Prefetch-Control: off
> X-Content-Type-Options: nosniff
> X-Response-Time: D=3D1311 us
> Location: http://contentlounge/cms/
> Cache-Control: max-age=3D0
> Expires: Thu, 14 Sep 2017 09:40:27 GMT
> Content-Type: text/html; charset=3Diso-8859-1