[BlueOnyx:11787] Re: Web Alias Redirects with SSL

Michael Stauber mstauber at blueonyx.it
Wed Dec 12 11:35:19 -05 2012


Hi Robert,

> Having the worst time trying to get SSL to redirect to the proper host
> name of the cert when no host is used (i.e.: https://vsite.com redirect
> to https://host.vsite.com).

Round peg, meet square hole. :-)

Typically on a BlueOnyx a Vsite is created with a FQDN consisting of
hostname, domainname and extension.

Therefore SSL certficates are also created for the full FQDN.

Lastly, the /etc/httpd/conf.d/ssl_perl.conf script that dynamically
creates the Vhost containers for SSL enabled sites is designed to create
the SSL enabled Apache Vhost container with the FQDN in mind.

For SSL certificates it makes a hell of a lot of a difference if the
certificate was issues to "company.com", "www.company.com" or
"mail.company.com". Because unless it's a multidomain or wildcard cert,
it will only work for the FQDN that it was issued for.

So if your certificate is for "www.vsite.com", all you need to do is to
tick the checkbox for "Alias redirects to main site". That'll already do
all the redirection you want and anyone who visits an alias will be
redirected to the main site where the SSL certificate is active.

In that case the only redirect that you might need, is the redirect from
port 80 to 443 to force everyone to use HTTPS when visiting that site.

-- 
With best regards

Michael Stauber



More information about the Blueonyx mailing list