Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: domain of jslive@gmail.com designates
 64.233.184.202 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=o+UEVf0piXEjOm24Ka4ubFl05D1KHSqYK9nECpb16rWvdivrW6bhYi/YP8+bYDkp++TGYuV5fXWWv61IATbCMLJ4YBQozYxpozrwy9X0qrrBTGhkNq62rjQ7EjBjg8PZvBucgejeKL8ODwPI2IGFjH9Kg3TLUXO0K3iNx1WwVME=
Message-ID: <e498c1660512011056p257ee7ccyaff3e3e5a0dfc6a8@mail.gmail.com>
Date: Thu, 1 Dec 2005 13:56:06 -0500
From: Joshua Slive <jslive@gmail.com>
To: users@httpd.apache.org
In-Reply-To: <438F431D.5060309@conwaycorp.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <438E294F.20309@conwaycorp.net>
	 <b2cc26e40511301445s11468e95v1b25a0fa3e175d5b@mail.gmail.com>
	 <438F431D.5060309@conwaycorp.net>
Subject: Re: [users@httpd] redirecting everything to ssl

On 12/1/05, Rob Benton <rob.benton@conwaycorp.net> wrote:
>
> RewriteCond %{HTTP_HOST}   !^my\.site [NC]
> RewriteCond %{HTTP_HOST}   !^$
> RewriteCond %{SERVER_PORT} ^(80|443)$
> RewriteRule ^/(.*)         https://my.site/$1 [L,R]
>
> That will direct all https:// traffic to the right hostname but trying
> to use http:// still results in the bad request error:
>
> "Your browser sent a request that this server could not understand.
> Reason: You're speaking plain HTTP to an SSL-enabled server port.
> Instead use the HTTPS scheme to access this URL, please."
>
> I must have missed something else in the config file.  I have 2 Listen
> directives, 1 for 80, and 1 for 443.

You probably have SSL turned on for the entire server, rather than
just for the requests coming in on port 443.  As I mentioned in an
earlier reply, you should have two vhosts: one for ssl on 443 and one
for non-ssl on 80.  The second one just redirects to the first and the
SSLEngine directive is only in the first one.

Joshual.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org