Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: Use http on one page, force ssl on all others |
|
| Author |
|
pschmehl
Joined: 13 Oct 2017
Posts: 16
Location: United States, Richardson, TX
|
 Posted: Sun 15 Oct '17 20:20 Post subject: Use http on one page, force ssl on all others |
 |
|
I have a need to make my rss feed http. I just switched the site to ssl, and that broke the feed. Apparently rss feeds don't do https yet.
I was using the following in my conf file:
| Code: | <VirtualHost 10.0.0.109:80>
ServerAdmin webmaster@vvfh.org
ServerName blog.vvfh.org
RedirectPermanent / https://blog.vvfh.org/
</VirtualHost>
<VirtualHost 10.0.0.109:443>
ServerName blog.vvfh.org |
Obviously, I can't do that and serve one page with http. So, what's the best solution for this? |
|
| Back to top |
|
bagu
Joined: 06 Jan 2011
Posts: 193
Location: France
|
| Posted: Sun 15 Oct '17 20:36 Post subject: |
|
|
Maybe with mod_rewrite and an other rewritecond in
| Code: | RewriteEngine On
RewriteCond %{HTTPS} off
RewriteCond something to exlude the page
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L] |
|
|
| Back to top |
|
pschmehl
Joined: 13 Oct 2017
Posts: 16
Location: United States, Richardson, TX
|
| Posted: Sun 15 Oct '17 21:16 Post subject: |
|
|
Wordpess has an option to force ssl for logins and admin pages.
| Code: | | define('FORCE_SSL_ADMIN', true); |
So, now the site is working again (the rss feed works on http.) Id like to force ALL pages, except the feed, to ssl, but I have some concerns.
Here's my conf file now:
| Code: | <VirtualHost 10.0.0.109:80>
ServerAdmin webmaster@vvfh.org
ServerName blog.vvfh.org
DocumentRoot /home/schmehl/Sites/blog.vvfh.org
<Directory "/home/schmehl/Sites/blog.vvfh.org">
AllowOverride All
Options FollowSymLinks
Require all granted
</Directory>
</VirtualHost>
<VirtualHost 10.0.0.109:443>
ServerName blog.vvfh.org |
I just need to figure out the rewrite rule to exclude the feed. I'm concerned, though, that any rewrite rule might stomp on the Wordpress setting, or vice versa. |
|
| Back to top |
|
pschmehl
Joined: 13 Oct 2017
Posts: 16
Location: United States, Richardson, TX
|
| Posted: Sun 15 Oct '17 21:40 Post subject: |
|
|
Would it be possible to do something like this?
| Code: | Rewrite Engine On
RewriteRule exclude the feed
RedirectPermanent (for everything else) |
|
|
| Back to top |
|
pschmehl
Joined: 13 Oct 2017
Posts: 16
Location: United States, Richardson, TX
|
| Posted: Tue 17 Oct '17 4:19 Post subject: |
|
|
I find Apache's rewrite rules extremely frustrating.
I've tried several variations of this. Nothing works.
| Code: | RewriteEngine On
RewriteCond %{HTTPS} =off
RewriteCond %{REQUEST_URI} !^/feed$
RewriteRule / https://blog.vvfh.org |
No matter what I do, http://blog.vvfh.org/feed gets rewritten to https://blog.vvfh.org/feed. It's like the RewriteCond is being ignored.
I would prefer for the entire site to be SSL, but the RSS feed doesn't work with SSL, so it has to be http. I have tried: | Code: | RewriteCond ${REQUEST_URL} !feed
RewriteCond ${REQUEST_URL} !/feed
RewriteCond ${REQUEST_URL} !^/feed
RewriteCond ${REQUEST_URL} !^/feed$
RewriteCond ${REQUEST_URL} !feed$ |
None of these work.
I'm at a loss. |
|
| Back to top |
|
glsmith
Moderator
Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA
|
| Posted: Tue 17 Oct '17 10:35 Post subject: |
|
|
hmmm, HTTPS will never = "off", I saw a statement somewhere in the mod_rewrite doc or wiki that would lead one to believe you can test for it, you can't. It either exists and it's value is on or simply doesn't exist. Now this works for me on it's own and will kick me out of https if I go to /feed via https.
RewriteCond %{HTTPS} =on [NC]
RewriteCond %{REQUEST_URI} /feed
RewriteRule ^ http://%{SERVER_NAME}%{REQUEST_URI} [R,L]
I am stupidly assuming that somewhere in the htaccess file that /feed is being rewritten to something like index.php?somevar=someval. So it depends on what you have there already, where you need to check for /feed before it's rewritten and if it's going to be rewritten back to https further down. |
|
| Back to top |
|
pschmehl
Joined: 13 Oct 2017
Posts: 16
Location: United States, Richardson, TX
|
| Posted: Tue 17 Oct '17 19:29 Post subject: |
|
|
I've been studying this for a while. i think you are right. /feed is built from something else. Last night I discovered that there's a template with a function in it that builds the feed, so it's probably not possible to redirect it.
I tried your configuration but got the same result. I don't think a rewrite rule is going to work. Instead, I'm going to have to find an extension that understands https feeds.
Thanks for your input.
BTW, on the Apache wiki, they have this for forcing http to https:
RewriteCond ${HTTPS} !=on [NC]
RewriteRuel ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
I prefer to use RedirectPermanent / https:/url |
|
| Back to top |
|
|
|
|
|
|
