Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
MIME-Version: 1.0
In-Reply-To: <CAEsBbL5Ksf663-vpGRf5jVsH5A=wi06q+vH3j1Um2s_mffQp_A@mail.gmail.com>
References: <CAEsBbL5Ksf663-vpGRf5jVsH5A=wi06q+vH3j1Um2s_mffQp_A@mail.gmail.com>
From: Daniel <dferradal@gmail.com>
Date: Tue, 7 Feb 2017 14:00:56 +0100
Message-ID: <CAHti5NFP9t67Q9_0R7znhbOaZFRasJx_y9N5Qd2rd7KaE4Q-Gg@mail.gmail.com>
To: "<users@httpd.apache.org>" <users@httpd.apache.org>, mj.kelleher@gmail.com
Content-Type: multipart/alternative; boundary=001a1148e3aaf0134b0547f05798
Subject: Re: [users@httpd] Apache 2.2 mod_headers question
archived-at: Tue, 07 Feb 2017 13:01:29 -0000

--001a1148e3aaf0134b0547f05798
Content-Type: text/plain; charset=UTF-8

It is perfectly normal for a backend that works with http to return
internal Location headers with http.

If apache is the backend of some other reverse proxy it is the job of that
reverse proxy to use the correct url scheme requested by the client, that
is, to revert the location headers back to "https" where that behaviour is
needed.

For instance, if the reverse proxy was Apache, it has a directive for that
called ProxyPassReverse which does exactly that.

Have you tried to "address this" in the reverse proxy where SSL termination
is?

2017-02-07 4:40 GMT+01:00 mjk <mj.kelleher@gmail.com>:

> I have spent 8+hours scouring the web, reviewing the Apache Httpd
> Cookbook, the Definitive Reference, and the 2.2 documentation for
> mod_headers, mod_proxy and core.
>
>
> CONFIGURATION:
> Apache Version:
> Server version: Apache/2.2.15 (Unix)
> Server built:   Jul 18 2016 15:24:00
>
> SSL offloading happens before the requests gets to Apache, which proxies
> http traffic to Apache on port 80.
>
> The Apache VirtualHost config in question does not have a ServerName or
> ServerAlias configured, and is configured to listen on port 80.
>
> SITUATION
> I have a Rewrite rule issuing a 301 redirect which uses flags [NC,R=301,L]
> -  which redirects to the correct hostname, but using http as the protocol.
>
> I have a mod_headers rule to try to deal with this:   Header always edit
> Location ^http://(.*) https://$1
> This rule is getting completely ignored.
>
>
> If I add a wholly new Header like:    Header always add SillyHeader
> SillyHeaderValue
> the header DOES get added.
>
>
> Does anyone know why the   "Header always edit"   rule is getting ignored?
>
> Thank you,
>
> --mjk
>


-- 
*Daniel Ferradal*
IT Specialist

email         dferradal at gmail.com
linkedin     es.linkedin.com/in/danielferradal

--001a1148e3aaf0134b0547f05798
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>It is perfectly normal for a backend that works with =
http to return internal Location headers with http.</div><div><br></div>If =
apache is the backend of some other reverse proxy it is the job of that rev=
erse proxy to use the correct url scheme requested by the client, that is, =
to revert the location headers back to &quot;https&quot; where that behavio=
ur is needed.<div><br></div><div>For instance, if the reverse proxy was Apa=
che, it has a directive for that called ProxyPassReverse which does exactly=
 that.</div><div><br></div><div>Have you tried to &quot;address this&quot; =
in the reverse proxy where SSL termination is?</div></div><div class=3D"gma=
il_extra"><br><div class=3D"gmail_quote">2017-02-07 4:40 GMT+01:00 mjk <spa=
n dir=3D"ltr">&lt;<a href=3D"mailto:mj.kelleher@gmail.com" target=3D"_blank=
">mj.kelleher@gmail.com</a>&gt;</span>:<br><blockquote class=3D"gmail_quote=
" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><=
div dir=3D"ltr"><div>I have spent 8+hours scouring the web, reviewing the A=
pache Httpd Cookbook, the Definitive Reference, and the 2.2 documentation f=
or mod_headers, mod_proxy and core.</div><div><br></div><div><br></div><div=
>CONFIGURATION:</div><div>Apache Version:=C2=A0<br></div><div><div>Server v=
ersion: Apache/2.2.15 (Unix)<br></div><div>Server built: =C2=A0 Jul 18 2016=
 15:24:00</div></div><div><br></div><div>SSL offloading happens before the =
requests gets to Apache, which proxies http traffic to Apache on port 80.<b=
r></div><div><br></div><div>The Apache VirtualHost config in question does =
not have a ServerName or ServerAlias configured, and is configured to liste=
n on port 80.</div><div><br></div><div>SITUATION</div><div>I have a Rewrite=
 rule issuing a 301 redirect which uses flags [NC,R=3D301,L] - =C2=A0which =
redirects to the correct hostname, but using http as the protocol.</div><di=
v><br></div><div>I have a mod_headers rule to try to deal with this: =C2=A0=
 Header always edit Location ^http://(.*) https://$1</div><div>This rule is=
 getting completely ignored.</div><div><br></div><div><br></div><div>If I a=
dd a wholly new Header like: =C2=A0 =C2=A0Header always add SillyHeader Sil=
lyHeaderValue</div><div>the header DOES get added.<br></div><div><br></div>=
<div><br></div><div>Does anyone know why the =C2=A0 &quot;Header always edi=
t&quot; =C2=A0 rule is getting ignored?</div><div><br></div><div>Thank you,=
</div><div><br></div><div>--mjk</div></div>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div class=
=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div dir=3D"ltr"><d=
iv><div dir=3D"ltr"><div><div dir=3D"ltr"><div><div dir=3D"ltr"><b>Daniel F=
erradal</b><div>IT Specialist</div><div><font color=3D"#000000"><br></font>=
</div></div></div></div></div><div><div dir=3D"ltr"><div><div dir=3D"ltr"><=
div><font color=3D"#000000">email =C2=A0 =C2=A0 =C2=A0 =C2=A0</font><font c=
olor=3D"#6fa8dc"> dferradal=C2=A0at <a href=3D"http://gmail.com" target=3D"=
_blank">gmail.com</a></font></div></div></div></div></div><div><div dir=3D"=
ltr"><div dir=3D"ltr"><div>linkedin =C2=A0 =C2=A0 <a href=3D"http://es.link=
edin.com/in/danielferradal" target=3D"_blank"><font color=3D"#6fa8dc"><span=
 style=3D"margin:0px;padding:0px;border:0px;font-size:13px;font-family:Helv=
etica,FreeSans,&#39;Liberation Sans&#39;,Helmet,Arial,sans-serif;vertical-a=
lign:baseline;font-stretch:inherit;line-height:17px">es.linkedin.com/in/</s=
pan><span style=3D"margin:0px;padding:0px;border:0px;font-size:13px;font-fa=
mily:Helvetica,FreeSans,&#39;Liberation Sans&#39;,Helmet,Arial,sans-serif;v=
ertical-align:baseline;font-stretch:inherit;line-height:17px">danielferrada=
l</span></font></a></div></div></div></div></div></div></div></div>
</div>

--001a1148e3aaf0134b0547f05798--