Apache https redirect without-www to with-www

alitrix · 07-21-2008, 02:49 PM

I've a little problem.

I've bought (atm it's a trial, but I will upgrade it to a normal one) SSL for my domain. The request is ment for my domein example: www.domain.com

The problem is, some people forget the www. and just type https://domain.com (or are redirected from another site with this URL).
On a normal :80 port, this shouldn't be a problem, BUT on :443 this means a SSL cerficate is send that is only ment for www.domain.com.
The browsers (FF2,3 and IE7,8) see that and show a message about the SSL isn't ment for this domain, bla bla

So, I want a RewriteCond to make it forward https://domain.com -> https://www.domain.com
After researching some links on internet I found out this isn't possible, am I correct?
Cause if someone goes to https://domain.com the SSL cert is sended and then the rewritecond starts working (because it will do a rewriterule, which is only allowed if there is a encrypted-line)

So again, my question is. Am I correct with my theory?

Greetz,

Ali

born4linux · 07-21-2008, 09:48 PM

try putting this in your web configuration file:

RewriteEngine on
RewriteCond %{HTTP_HOST} !^www\.domain\.com [NC]
RewriteRule ^.*$ https://www\.%{SERVER_NAME}%{REQUEST_URI} [L,R]

alitrix · 07-22-2008, 02:21 AM

This works fine, but now I'm getting a endless loop :s

This is my config:

Code:

<VirtualHost *:443>
    ServerAdmin webmaster@domain.com
    ServerName www.domain.com:443
    ServerAlias www.domain.com domain.com

    DocumentRoot "/var/www/domain.com"

    RewriteEngine on
    RewriteCond %{HTTP_HOST} !^www\.domain\.com[NC]
    RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R]

        <Directory />
                Options FollowSymLinks
                AllowOverride None
        </Directory>

    <Directory /var/www/domain.com/sslCerts>
        Deny from all
    </Directory>

        <Directory /var/www/domain.com>
                Options FollowSymLinks MultiViews
                AllowOverride None
                Order allow,deny
                allow from all
        </Directory>

        ErrorLog /var/log/apache2/domain.com/error.log

        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel info

        CustomLog /var/log/apache2/domain.com/access.log combined

        SSLEngine on

        SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

        SSLCertificateFile /var/www/domain.com/sslCerts/www-domain-com.crt
        SSLCertificateKeyFile /var/www/domain.com/sslCerts/myserver.key

        BrowserMatch ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
</VirtualHost>

alitrix · 07-24-2008, 06:11 AM

Anyone else that can help me...?