Make Apache cgi-bin SSL Only?

TruckStuff · 05-06-2005, 02:47 PM

Is there a way to make my cgi-bin folder for Apache only respond to SSL requests?. Currently http://www.mydomain.com/cgi-bin/test-cgi and https://www.mydomain.com/cgi-bin/test-cgi both work fine. I want http://www.mydomain.com/cgi-bin/test-cgi to return a 404 or some other error. Doable? Apache 2.0.54.

DaHammer · 05-07-2005, 12:21 AM

Yeah you should be able to do it using the SSLRequireSSL directive when you define the parameters for your cgi-bin directory. For example:

Code:

    <Directory "/usr/local/apache/cgi-bin">
        AllowOverride None
        Options None
        Order allow,deny
        Allow from all
        SSLRequireSSL
    </Directory>

sigsegv · 05-07-2005, 01:21 PM

You could also kick the user to the SSL version from the plain version with this:

Code:

RewriteEngine     On
RewriteRule         ^/cgi-bin/(.*)     https://yourdomain.com/cgi-bin/$1 [R]

or something similar

TruckStuff · 05-09-2005, 10:37 AM

Quote:

Originally posted by DaHammer
Yeah you should be able to do it using the SSLRequireSSL directive when you define the parameters for your cgi-bin directory. For example:

Code:

<Directory "/usr/local/apache/cgi-bin"> AllowOverride None Options None Order allow,deny Allow from all SSLRequireSSL </Directory>

Thanks, that did the trick. Couldn't get the mod_rewrite working correctly.