Re: SSL "Redirect" question

Art,

To allow a redirect, you need two ports.   Each port can only either understand unencrypted http (http://) or TLS-enhanced HTTP (https://).   You cannot do both on a single port.

That means that whomever is connecting to your port 82 without TLS can't be redirected, because the server can't communicate without TLS.

You need one port that's unencrypted and does nothing but redirect to another port running TLS.

(TLS is replacement for what was formerly SSL if you didn't know.)


On 9/3/24 4:23 PM, Art Tostaine, Jr. wrote:

Brad: When I activate virtual host nothing works. I have a subdomain. Do I
need the SSL stuff? Here is what I have:

<VirtualHost *:82>
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_DC4PGMLIB
SSLProtocolDisable SSLv3
Redirect permanent / https://me.myserver.com/
</VirtualHost>

On Tue, Sep 3, 2024 at 4:51 PM Brad Stone <bvstone@xxxxxxxxx> wrote:

Here's how I do it for my website in Apache:

<VirtualHost ip_address:80>
ServerName bvstools.com
ServerAlias bvstools.com
ServerAlias www.bvstools.com
Redirect permanent / https://www.bvstools.com/
</VirtualHost>

On Tue, Sep 3, 2024 at 2:02 PM Art Tostaine, Jr. <atostaine@xxxxxxxxx>
wrote:

We want to enable SSL on an internal web site we've been using forever.

I'm

able to install a godaddy cert and apply it to the QHTTPSVR instance. I
tested SSL and it worked fine.

When I went to HTTP://ourserver.com:82 I get an application error. Is
there
a configuration setting in the configuration file so that it will

redirect

automatically to https or accept HTTP traffic as well? SSL was turned on
for 82, not a new port.

Thanks
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.