Re: Identify http:// connections

You could specify CustomLog inside the VirutalHost for the HTTP listener.
Then every entry in that log will be accessing using HTTP.


Here is an example of the virtual host with the log and redirect to the HTTPS port.

<VirtualHost *:10088>
ServerName SERVERNAME:10088
ServerAlias servername.fully.qualified.com
DocumentRoot /www/zendphp7/htdocs/serverroot
CustomLog logs/log_http_access combined
Redirect permanent / https://SERVERNAME:10089/
</VirtualHost>


Then review the log.
/www/zendphp7/logs/log_http_access.Q120050100

Here is an example of the HTTPS virtual host
<VirtualHost *:10089>
ServerName SERVERNAME:10089
ServerAlias servername.fully.qualified.com
DocumentRoot /www/zendphp7/htdocs/ serverroot


SSLEngine On
SSLAppName QIBM_HTTP_SERVER_ZENDPHP7
SSLUnknownRevocationStatus ignore
SSLVersion ALL
SetEnv HTTPS_PORT 10089
...

Chris Hiebert
Senior Programmer/Analyst
Disclaimer: Any views or opinions presented are solely those of the author and do not necessarily represent those of the company.


-----Original Message-----
From: WEB400 <web400-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Justin Taylor
Sent: Tuesday, April 21, 2020 9:55 AM
To: WEB400 (web400@xxxxxxxxxxxxxxxxxx) <web400@xxxxxxxxxxxxxxxxxx>
Subject: [WEB400] Identify http:// connections

I have an internal Apache instance that allows both HTTP and HTTPS connections. Is there a good way to identify clients connecting in the clear using HTTP? It looks like I could try and parse my access_log, but that seems clunky and error prone.

TIA