Re: SSL "Redirect" question

ah... I assumed too much there.

On Tue, Sep 3, 2024 at 4:35 PM Scott Klement <[email protected]>
wrote:

> Art,
>
> To allow a redirect, you need two ports.   Each port can only either
> understand unencrypted http (http://) or TLS-enhanced HTTP (https://).
> You cannot do both on a single port.
>
> That means that whomever is connecting to your port 82 without TLS can't
> be redirected, because the server can't communicate without TLS.
>
> You need one port that's unencrypted and does nothing but redirect to
> another port running TLS.
>
> (TLS is replacement for what was formerly SSL if you didn't know.)
>
>
> On 9/3/24 4:23 PM, Art Tostaine, Jr. wrote:
> > Brad: When I activate virtual host nothing works. I have a subdomain.
> Do I
> > need the SSL stuff?  Here is what I have:
> >
> >    <VirtualHost *:82>
> >      SSLEngine On
> >      SSLAppName QIBM_HTTP_SERVER_DC4PGMLIB
> >      SSLProtocolDisable SSLv3
> >      Redirect permanent / https://me.myserver.com/
> >     </VirtualHost>
> >
> > On Tue, Sep 3, 2024 at 4:51 PM Brad Stone <[email protected]> wrote:
> >
> >> Here's how I do it for my website in Apache:
> >>
> >> <VirtualHost ip_address:80>
> >>    ServerName bvstools.com
> >>    ServerAlias bvstools.com
> >>    ServerAlias www.bvstools.com
> >>    Redirect permanent / https://www.bvstools.com/
> >> </VirtualHost>
> >>
> >> On Tue, Sep 3, 2024 at 2:02 PM Art Tostaine, Jr. <[email protected]>
> >> wrote:
> >>
> >>> We want to enable SSL on an internal web site we've been using forever.
> >> I'm
> >>> able to install a godaddy cert and apply it to the QHTTPSVR instance. I
> >>> tested SSL and it worked fine.
> >>>
> >>> When I went to HTTP://ourserver.com:82 I get an application error. Is
> >>> there
> >>> a configuration setting in the configuration file so that it will
> >> redirect
> >>> automatically to https or accept HTTP traffic as well?  SSL was turned
> on
> >>> for 82, not a new port.
> >>>
> >>> Thanks
> >>> --
> >>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> >>> list
> >>> To post a message email: [email protected]
> >>> To subscribe, unsubscribe, or change list options,
> >>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>> or email: [email protected]
> >>> Before posting, please take a moment to review the archives
> >>> at https://archive.midrange.com/web400.
> >>>
> >>>
> >> --
> >> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> >> list
> >> To post a message email: [email protected]
> >> To subscribe, unsubscribe, or change list options,
> >> visit: https://lists.midrange.com/mailman/listinfo/web400
> >> or email: [email protected]
> >> Before posting, please take a moment to review the archives
> >> at https://archive.midrange.com/web400.
> >>
> >>
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
>
>
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.