Uploaded image for project: 'Product Technical Learning'
  1. Product Technical Learning
  2. PTL-5536

RH358-4: [RH254] - Usage of non-recommended redirection for HTTPS

XMLWordPrintable

    • 8
    • Hide

      Tell students that there are 2 ways to do this and that at this moment the recommended by Apache Foundation way is to use the Redirect directive.

      Show
      Tell students that there are 2 ways to do this and that at this moment the recommended by Apache Foundation way is to use the Redirect directive.
    • en-US (English)

      URL:
      Reporter RHNID: p.tselios
      Section: -
      Language: en-US (English)
      Workaround: Tell students that there are 2 ways to do this and that at this moment the recommended by Apache Foundation way is to use the Redirect directive.

      Description: In SG, page 303 we discuss about the HTTP to HTTPS redirection.
      However, this is not recommended from Apache foundation!

      Specifically, Apache Foundation says that mod_rewrite should be our last resort!
      https://httpd.apache.org/docs/2.4/rewrite/avoid.html

      On the same page, it's clear that the recommended way to redirect http to HTTPS is to use the "Redirect" directive:

      Taking this into consideration, the solution of the GE in page 304 (step 4.3) should be: 

      <VirtualHost *:80>
    ServerName wwwX.example.com
    Redirect "/" "https://wwwX.example.com/"
</VirtualHost>

<VirtualHost *:443>
    ServerName wwwX.example.com
    ServerName wwwX.example.com
    SSLEngine On
    SSLProtocol all -SSLv2 -SSLv3
    SSLCipherSuite HIGH:MEDIUM:!aNull:!MD5
    SSLHonorCipherOrder on
    SSLCertificateFile /etc/pki/tls/certs/wwwX.crt
    SSLCertificateChainFile /etc/pki/tls/certs/example-ca.crt
    SSLCertificateKeyFile /etc/pki/tls/private/wwwX.key 
  
    DocumentRoot /srv/wwwX/www
</VirtualHost>

</VirtualHost>

              rht-sbonnevi Steven Bonneville
              p.tselios Petros Tselios (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: