Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #180617

Re: converting my local site to be https only access

From Gene Heskett <gheskett@shentel.net>
Newsgroups linux.debian.user
Subject Re: converting my local site to be https only access
Date 2017-05-02 22:50 +0200
Message-ID <tCMUa-3a8-19@gated-at.bofh.it> (permalink)
References <tBroJ-AM-1@gated-at.bofh.it> <tCDnP-5nt-7@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Tuesday 02 May 2017 06:35:19 Jonathan Dowland wrote:

> On Fri, Apr 28, 2017 at 11:35:06PM -0400, Gene Heskett wrote:
> > Greetings all;
> >
> > My web site (see the sig) is local, on this machine, in a pretty
> > tight sandbox, but not running https.
> >
> > Where can I find a tut that is a complete instruction set to have it
> > do an auto-redirect to itself, but using the "s" stuff regardless of
> > the accessing client as long as the client can handle the https
> > stuff this conversion will return to the client?
>
> Inferring that you are using apache2, a few notes from my observations
> of the thread as it currently stands.
>
> one of the instruction sets you were following was suggesting to use
> mod_rewrite. Personally, I think that's overkill. Achieving what you
> want is possible using a simple Redirect, which is provided by
> mod_rewrite, which is very likely already enabled (but if not, you can
> enable it in the same way, via symlink, which you can create via
> a2enmod, or by hand).
>
> We don't know how you have your site set up already, in particular
> whether or not you are using VirtualHosts. My advice would be to do so
> if you are not, so a "pre-step" would be migrating to them.
>
> Once using VirtualHosts, you can configure one to bind to port 80, and
> another to 443. From memory, it would look something like this
>
>  <VirtualHost *:80>
>    RedirectMatch permanent ^(.*)$ https://<YOUR SITE ADDRESS>$1
>  </VirtualHost>
>  <VirtualHost *:443>
>    # configuration for your website (now) lives here
>  </VirtualHost>
>
> Substituting <YOUR SITE ADDRESS> appropriately.
>
Humm, is this sounding like I should open up a fwd to port 443 on this 
machine in dd-wrt? As it is, I am only NATing port 6309 to it via the 
NAT menu. I have dd-wrt locked down pretty tightly.  No one has come 
thru it in at least a decade except a friend, and I had to give him the 
username & pw, twice, once for the router and once to get on into this 
machine.

Right?

Thanks Jonathan.

> This is all from memory as I haven't used apache2 myself for many
> years (and looking back, having since used things like lighttpd and
> more recently nginx, the configuration language is much worse;
> stockholm syndrome whilst I was a user perhaps?)


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page <http://geneslinuxbox.net:6309/gene>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-04-29 05:40 +0200
  Re: converting my local site to be https only access Felix Dietrich <felix.dietrich@sperrhaken.name> - 2017-04-29 10:30 +0200
    Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-04-29 15:10 +0200
      Re: converting my local site to be https only access Jochen Spieker <ml@well-adjusted.de> - 2017-04-29 20:30 +0200
        Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-04-29 20:50 +0200
          Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-04-30 23:10 +0200
            Re: converting my local site to be https only access Dejan Jocic <jodejka@gmail.com> - 2017-04-30 23:50 +0200
            Re: converting my local site to be https only access Eike Lantzsch <zp6cge@gmx.net> - 2017-05-01 00:00 +0200
            Re: converting my local site to be https only access davidson@freevolt.org - 2017-05-01 02:20 +0200
              Re: converting my local site to be https only access Lisi Reisz <lisi.reisz@gmail.com> - 2017-05-01 03:00 +0200
                Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-01 03:40 +0200
                Re: converting my local site to be https only access davidson@freevolt.org - 2017-05-01 21:50 +0200
              Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-01 03:40 +0200
                Re: converting my local site to be https only access Greg Wooledge <wooledg@eeg.ccf.org> - 2017-05-01 15:30 +0200
                Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-01 16:10 +0200
                Re: converting my local site to be https only access rhkramer@gmail.com - 2017-05-01 17:20 +0200
                Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-01 19:00 +0200
                Re: converting my local site to be https only access rhkramer@gmail.com - 2017-05-01 21:00 +0200
                Re: converting my local site to be https only access rhkramer@gmail.com - 2017-05-01 21:00 +0200
                Re: converting my local site to be https only access davidson@freevolt.org - 2017-05-02 01:40 +0200
                Re: converting my local site to be https only access Ric Moore <wayward4now@gmail.com> - 2017-05-03 18:40 +0200
  Re: converting my local site to be https only access Jonathan Dowland <jmtd@debian.org> - 2017-05-02 12:40 +0200
    Re: converting my local site to be https only access <tomas@tuxteam.de> - 2017-05-02 13:30 +0200
      Re: converting my local site to be https only access Jonathan Dowland <jmtd@debian.org> - 2017-05-02 23:20 +0200
        Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-02 23:40 +0200
          Re: converting my local site to be https only access <tomas@tuxteam.de> - 2017-05-03 11:30 +0200
            Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-03 14:40 +0200
              Re: converting my local site to be https only access <tomas@tuxteam.de> - 2017-05-03 15:30 +0200
    Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-02 22:50 +0200
      Re: converting my local site to be https only access Jonathan Dowland <jmtd@debian.org> - 2017-05-02 23:20 +0200
        Re: converting my local site to be https only access Gene Heskett <gheskett@shentel.net> - 2017-05-02 23:50 +0200

csiph-web