Apache http to https redirect with Rewrite

Question

Using Apache 2.4 on OS X Yosemite. Need to modify this virtual host for it to redirect http://server.kibana and http://www.server.kibana to https://server.kibana

Here is the Vhost:

<VirtualHost *:8443>
            ServerName www.server.kibana
            ServerAlias server.kibana
            ServerAdmin [email protected]
           # RedirectPermanent http://server.kibana https://server.kibana
           # DocumentRoot /usr/local/var/www/kibana-4.0.2-darwin-x64/src/public
            SSLEngine on
            SSLCertificateFile "/usr/local/etc/apache2/2.4/ssl-keys/server.crt"
            SSLCertificateKeyFile "/usr/local/etc/apache2/2.4/ssl-keys/server.key"
        #
        # Proxy
        #
    ProxyRequests Off
    <Proxy *>
        Order Allow,Deny
        Allow from all
        AuthType Basic
        AuthName "Authenticated proxy"
        AuthUserFile /usr/local/etc/apache2/2.4/elastic.htpwd
        Require valid-user
    </Proxy>
        ProxyPass / http://127.0.0.1:5601
        ProxyPassReverse / http://127.0.0.1:5601
        RewriteEngine on
        RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
        RewriteRule .* http://127.0.0.1:5601%{REQUEST_URI} [P,QSA]
            ErrorLog /usr/local/var/log/apache2/kibana_error.log
            LogLevel warn
            CustomLog /usr/local/var/log/apache2/kibana_access.log combined
</VirtualHost>

Any suggestions what to add or how to modify the RewriteRule and RewriteCond? Thanx!

Answer 1

You can use this, and rewrite to the domain your certificate was issued to:

RewriteCond %{HTTPS} !=on [NC]
RewriteRule ^(.*) https://www.example.com$1 [R=301,L]

Or use this include file where you want to enforce SSL, while enabling HTTP access to parts of server.

# Script to require SSL

<If "%{HTTPS} == 'on'">
    SSLOptions +StrictRequire
    SSLRequireSSL
</If>
<Else>
    RedirectMatch permanent ^/?(.*) https://www.example.com/$1
</Else>

You could use %{SERVER_NAME} instead of www.example.com. This works well with a normal certificate.

RewriteCond %{HTTPS} !=on [NC]
RewriteRule ^(.*) https://%{SERVER_NAME}$1 [R=301,L]

The variable %{HTTP_HOST} contains the hostname from the request and could be used instead of www.exaxmple.com. However, this may not be a hostname that matches the certificate. It does work with multi-domain certificates.

RewriteCond %{HTTPS} !=on [NC]
RewriteRule ^(.*) https://%{HOST_NAME}$1 [R=301,L]

Adding UseCanonicalName dns to your configuration UseCanonicalName dns will provide the SERVER_NAME from DNS. However, you need to ensure DNS provides the desired domain. If you get this working, you may be able to use the same configuration for all servers. Alternatively, you can include a small server specific file to provide the server name.

You do need to listen on different ports for HTTP and HTTPS. Test each before your enable rewriting. This is a minimal configuration for a site that listens on both HTTP and HTTPS and redirects all requests to HTTPS. The redirect will need a port if non-standard ports are used. This configuration relies on directory access being configured outside the virtual host definition.

<VirtualHost *:80 *:443>
    ServerAdmin [email protected]
    DocumentRoot /var/www/
    ServerName  www.example.com
    ServerAlias example.com

    SSLEngine On
    SSLCipherSuite HIGH:MEDIUM
    SSLCertificateFile      /etc/ssl/certs/www.example.com-cert.pem
    SSLCertificateKeyFile   /etc/ssl/private/www.example.com-key.pem
    SSLCACertificatePath    /etc/ssl/certs/

    RewriteEngine On
    RewriteCond %{HTTPS} !=on [NC]
    RewriteRule ^(.*) https://%{SERVER_NAME}$1 [R=301,L]

</VirtualHost>

Answer 2

Try to add this code below "RewriteEngine on" and see if it works.

RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://server.kibana/$1 [R=301,L]