Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Message-ID: <4D0584A4.8080004@tione.eu>
Date: Mon, 13 Dec 2010 04:27:48 +0200
From: Mxrgus Pxrt <margus@tione.eu>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US;
 rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6
MIME-Version: 1.0
To: users@httpd.apache.org
References: <1544345082.2700.1291969623456.JavaMail.root@iris>
 <4D021539.3020505@tione.eu> <4D038EDE.6030601@adaptr.nl>
In-Reply-To: <4D038EDE.6030601@adaptr.nl>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] SetEnv HTTPS on... not working.

Hey!

I did not mean that I want HTTP to HTTPS transparency (although, I can't 
see how do they differ to end application - communication from client to 
server is over SSL with HTTPS + few additional environmental values - 
should not affect end app).

I'll try to explain, what I ment with an example:

Components:
- client
- SSL offloader (Apache)
- Backend server (Apache)


Now client makes query to https://example.com. Backend server requeries 
that HTTPS on or redirect to there is done. Code example below:

RewriteCond %{HTTPS} !=on
RewriteRule (.*)      https://example.com/$1 [L,R=301]


(But this does not work, as query comes to port 80 over HTTP from SSL 
offloader and infinite loop is created.)


I know, I could write headers from SSL offloader and check in backend 
server (or even do this in SSL offloader):

RewriteCond %{HTTP:HTTPS} !=on
RewriteRule (.*)      https://example.com/$1 [L,R=301]


But I am stubborn and want to know, how to overwrite this value (or 
answer, that it's not possible because of ...).


Br,
Margus


On 12/11/2010 04:46 PM, Jeroen Geilman wrote:
> On 12/10/10 12:55 PM, Mxrgus Pxrt wrote:
>> I have SSL offloader, what checks wheather user came using HTTP or 
>> HTTPS (sends accordingly header.)
>>
>> As I want it to be transparent to application and available to 
>> .htaccess, I use apaches values. I want to overwrite them.
>
> Switching from HTTP to HTTPS cannot be transparent. ever.
>


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org