[support] http > https redirect

[sander-martijn]

I thought about that - I have the php skills but am not sure in this 
short time that I have the drupal skills to build the module.  
Furthermore I'm feeling like if i can't get an apache directive or a 
module to work, I think my module would likely have the same problem.  
There has to be a conflict somewhere whether it's drupal, another module 
or the host's server config.

.s

Metzler, David wrote:
>
> Given that you're running out of time, do you have the skills to mock 
> up a custom module to do the job?  If I was having problems with 
> secure pages I might consider doing this rather than trying to get the 
> Mod rewrite rules to work.
>
>  
>
> Simple module that implements hook_init and does the tests you want 
> with a drupal_goto call at the end? 
>
>  
>
> Just thinking out of the box....
>
>  
>
> Dave
>
>  
>
> ------------------------------------------------------------------------
>
> *From:* support-bounces at drupal.org [mailto:support-bounces at drupal.org] 
> *On Behalf Of *sander-martijn
> *Sent:* Monday, September 24, 2007 6:25 AM
> *To:* support at drupal.org
> *Subject:* Re: [support] http > https redirect
>
>  
>
> Securepages doesn't work properly.  It's actually exactly the same 
> problem I see with my apache directives - when redirecting back from 
> https it results in an endless loop of redirects, resulting in apache 
> reporting "this page is redirecting in a way that will never resolve" 
> - or maybe it's firefox that gives up I can't remember.
>
> And I've seen the other post, but I definitely am not going down the 
> multi-site path for one page.  That's like killing a cockroach with a 
> shotgun.
>
> Bill Fitzgerald wrote:
>
> These two might also be helpful:
>  
> http://drupal.org/project/securepages and http://drupal.org/node/37932
>  
> Cheers,
>  
> Bill
>  
> sander-martijn wrote:
>   
>> Thanks - that is the easiest way, but only works if you want your 
>> entire site in https (https vastly slows down your site so I would 
>> almost never want that).  I need only one page to be https.  
>> Redirecting TO https is no problem:
>> RewriteCond %{SERVER_PORT} !^443$
>> RewriteRule ^(contact/requestBook)$ https://s24863.gridserver.com/$1 [R=301,L]
>>   
>> Redirecting back FROM https when you go to any of the other sites is 
>> what doesn't work - i either get an endless loop (resulting in apache 
>> failing) or it stays in https all the time:
>> # Redirect non-secure pages to HTTP if requested by HTTPS
>>   RewriteCond %{SERVER_PORT} ^443$
>>   RewriteCond %{REQUEST_URI} !^contact/requestBook$
>>   RewriteRule ^(.*)$ http://s24863.gridserver.com/$1 [R=301,L]
>>   
>> It has something to do with the way drupal rewrites urls - going to 
>> https the url is one thing but by the time it gets to the next 
>> condition (on the following line) to rewrite back to http if necessary 
>> it thinks it's something else.  so while it matches 
>> contact/requestBook as the request URI it won't match NOT 
>> contact/requestBook for the return url.
>>  
>> I still haven't gotten this working and the securepages maintainer 
>> says he can't reproduce the problem with the module.  And the site 
>> goes live very soon.  I've seen many issues posted both on the 
>> drupal.org forums on problems with the apache solution above as well 
>> as on the module page for the maintainer - so I believe it has 
>> something to do with clean urls or someething like that and that there 
>> IS a solution - I just can't figure out what it is.
>>  
>> Thanks
>> .sander
>>  
>>  
>> Chris Johnson wrote:
>>     
>>> Your situation may be vastly different from ours, so this may be of no
>>> help at all.  But here is how we redirect HTTP to HTTPS for our sites
>>> using Apache 2:
>>>  
>>> <VirtualHost *:80>
>>>     ServerName  www.example.com <http://www.example.com>
>>>     Redirect    /   https://www.example.com/
>>> </VirtualHost>
>>>   
>>>       
>> -- 
>> ------------------------------------------------------------------------
>>  
>> sander-martijn <mailto:sander at sander-martijn.com>
>> interface developer | architect
>> sander at sander-martijn.com <mailto:sander at sander-martijn.com> <mailto:sander at sander-martijn.com>
>> www.sander-martijn.com <http://www.sander-martijn.com> <http://www.sander-martijn.com>
>>  
>> ------------------------------------------------------------------------
>>     
>  
>  
>   
>
>  
>
> -- 
>
> ------------------------------------------------------------------------
>
> sander-martijn <mailto:sander at sander-martijn.com>
> interface developer | architect
> sander at sander-martijn.com <mailto:sander at sander-martijn.com>
> www.sander-martijn.com <http://www.sander-martijn.com>
>
> ------------------------------------------------------------------------

-- 
------------------------------------------------------------------------

sander-martijn <mailto:sander at sander-martijn.com>
interface developer | architect
sander at sander-martijn.com <mailto:sander at sander-martijn.com>
www.sander-martijn.com <http://www.sander-martijn.com>

------------------------------------------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.drupal.org/pipermail/support/attachments/20070924/00ba95ee/attachment-0001.htm