Re: SSL "Redirect" question

Art,

To allow a redirect, you need two ports.   Each port can only either 
understand unencrypted http (http://) or TLS-enhanced HTTP (https://).   
You cannot do both on a single port.

That means that whomever is connecting to your port 82 without TLS can't 
be redirected, because the server can't communicate without TLS.

You need one port that's unencrypted and does nothing but redirect to 
another port running TLS.

(TLS is replacement for what was formerly SSL if you didn't know.)


On 9/3/24 4:23 PM, Art Tostaine, Jr. wrote:
> Brad: When I activate virtual host nothing works. I have a subdomain.  Do I
> need the SSL stuff?  Here is what I have:
>
>    <VirtualHost *:82>
>      SSLEngine On
>      SSLAppName QIBM_HTTP_SERVER_DC4PGMLIB
>      SSLProtocolDisable SSLv3
>      Redirect permanent / https://me.myserver.com/
>     </VirtualHost>
>
> On Tue, Sep 3, 2024 at 4:51 PM Brad Stone <[email protected]> wrote:
>
>> Here's how I do it for my website in Apache:
>>
>> <VirtualHost ip_address:80>
>>    ServerName bvstools.com
>>    ServerAlias bvstools.com
>>    ServerAlias www.bvstools.com
>>    Redirect permanent / https://www.bvstools.com/
>> </VirtualHost>
>>
>> On Tue, Sep 3, 2024 at 2:02 PM Art Tostaine, Jr. <[email protected]>
>> wrote:
>>
>>> We want to enable SSL on an internal web site we've been using forever.
>> I'm
>>> able to install a godaddy cert and apply it to the QHTTPSVR instance. I
>>> tested SSL and it worked fine.
>>>
>>> When I went to HTTP://ourserver.com:82 I get an application error. Is
>>> there
>>> a configuration setting in the configuration file so that it will
>> redirect
>>> automatically to https or accept HTTP traffic as well?  SSL was turned on
>>> for 82, not a new port.
>>>
>>> Thanks
>>> --
>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
>>> list
>>> To post a message email: [email protected]
>>> To subscribe, unsubscribe, or change list options,
>>> visit: https://lists.midrange.com/mailman/listinfo/web400
>>> or email: [email protected]
>>> Before posting, please take a moment to review the archives
>>> at https://archive.midrange.com/web400.
>>>
>>>
>> --
>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
>> list
>> To post a message email: [email protected]
>> To subscribe, unsubscribe, or change list options,
>> visit: https://lists.midrange.com/mailman/listinfo/web400
>> or email: [email protected]
>> Before posting, please take a moment to review the archives
>> at https://archive.midrange.com/web400.
>>
>>
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.