httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Farid Izem <>
Subject [users@httpd] Filtering HTTPS Access
Date Fri, 11 Mar 2011 18:27:40 GMT

I'm currently working on a configuration to force HTTPS by directory.
Configuration looks like :

<Directory /home/user/apache_data/htdocs>
SSLOptions StrictRequire
ErrorDocument 403

This configuration works perfectly. But i'd like to allow HTTP
connection to a particular set of IP,
for example keepalive from load balancer which are perform only in HTTP.

First solution would be to change load balancer to make keepalive over
HTTPS. I have no money.
Second solution, redirect HTTP to HTTPS  using Rewrite engine whereas
using SSLRequireSSL and ErrorDocument.
Already done and validated.

I want to avoid RewriteRule usage. I d'like to used SSLRequire with
some conditions.

Is it possible with

<Directory /home/user/apache_data/htdocs>
SSLOptions StrictRequire
SSLRequire ( %{REMOTE_ADDR} !~ m/192\.172\.10\.[1-2]/)
ErrorDocument 403

It is not working.Can you help me please ? is SSLRequire only used in
HTTPS context only ?



The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:> for more info.
To unsubscribe, e-mail:
   "   from the digest:
For additional commands, e-mail:

View raw message