Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: local policy)
Message-ID: <4E2DC0AD.7060807@adaptr.nl>
Date: Mon, 25 Jul 2011 21:14:53 +0200
From: Jeroen Geilman <jeroen@adaptr.nl>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:5.0) Gecko/20110624 Thunderbird/5.0
MIME-Version: 1.0
To: users@httpd.apache.org
References: <4E2DB9D6.8090603@sohnen-moe.com>
In-Reply-To: <4E2DB9D6.8090603@sohnen-moe.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] RewriteRule acts differently for different browsers

On 2011-07-25 20:45, James Moe wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello,
>    apache v2.0
>
>    The reason for this redirection is that when I purchased the SSL
> certificate, I did not know to get one for than the domain's URL,
> <sohnen-moe.com>. A secure connection to<www.sohnen-moe.com>  brings up
> the warning about a possibly "untrusted site."

You should not use rewriting for this, it is entirely unnecessary and 
only adds complexity.
Instead, you add a new vhost for www.sohnen-moe.com, and do a blank 
redirect to HTTPS.

> RewriteEngine on
> RewriteCond %{HTTP_HOST} =www.sohnen-moe.com
> RewriteRule ^/(.*)$ https://sohnen-moe.com/$1 [L,R]
>
>   For the browsers Firefox v5 linux, Chrome v12.0 linux, Opera v11.5
> linux, Semaonkey v2.1 os/2, Safari v5.0 windows, Internet Explorer v8, I
> get different redirections for the URL<http://www.sohnen-moe.com/>.
>    Firefox: http://sohnen-moe.com/////////////////////<--Not a typo!
>     Chrome: https://sohnen-moe.com/
>      Opera: http://www.sohnen-moe.com/
> Seamonkey: http://www.sohnen-moe.com/
>     Safari: http://www.sohnen-moe.com/
> IExplorer: http://www.sohnen-moe.com/
>
>    Only Chrome redirected like I thought the rule indicates.
>    Is this to be expected? It seems rather arbitrary.

I suspect that the above is using the highly dubious VirtualHost * 
construct, which should die and burn in hell.
If so, you are not taking into account the possibility that the request 
is coming in over HTTPS.
Add another rewritecond that checks for it.


-- 
J.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org