Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-11-12 Thread Christopher Schultz
James, On 11/5/20 12:07, James H. H. Lampert wrote: I'm intrigued by Mr. Schultz's suggestion of Maybe you just want RedirectPermanent instead of Rewrite(Cond|Rule)? Would that make a difference? Or is it just a matter of altering the RewriteCond clause to specifically ignore anything that

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-11-11 Thread James H. H. Lampert
On 8/21/20 1:02 PM, logo wrote: From my experience I have excluded .well-known from the redirect. That appears to be the correct answer. I probably didn't see that line back in August, or I probably would have replied by asking something like, "Ok, and how do I do that?" Be that as it

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-11-05 Thread James H. H. Lampert
On 8/24/20 9:57 AM, Christopher Schultz wrote: So your RewriteCond[ition] is expected to always be true? Okay. Maybe remove it, then? BTW I think your rewrite will strip query strings and stuff like that. Maybe you just want RedirectPermanent instead of Rewrite(Cond|Rule)? Ladies and

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-25 Thread James H. H. Lampert
I think I found something. At the very bottom of LE's FAQ page, https://letsencrypt.org/docs/faq (under "I successfully renewed a certificate but validation . . ."), I found: Once you successfully complete the challenges for a domain, the resulting authorization is cached for your account to

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-25 Thread John Dale
I had to write some custom code to look for the lets encrypt headers then respond appropriately for verification. It wasn't too bad, although I don't like having that entity-specific code in there so I've isolated and commented it. On 8/25/20, Christopher Schultz wrote: > -BEGIN PGP SIGNED

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 8/24/20 13:24, James H. H. Lampert wrote: > On 8/24/20 9:57 AM, Christopher Schultz wrote: >> So your RewriteCond[ition] is expected to always be true? Okay. >> Maybe remove it, then? BTW I think your rewrite will strip query >> strings

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-24 Thread James H. H. Lampert
On 8/24/20 9:57 AM, Christopher Schultz wrote: So your RewriteCond[ition] is expected to always be true? Okay. Maybe remove it, then? BTW I think your rewrite will strip query strings and stuff like that. Maybe you just want RedirectPermanent instead of Rewrite(Cond|Rule)? Okay, so everyone

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 8/24/20 11:45, James H. H. Lampert wrote: > On 8/22/20 7:35 AM, Christopher Schultz wrote: > >>> (1) every http request is unconditionally redirected to https: >>> >>> RewriteEngine on RewriteCond %{HTTP_HOST} !^www\. [NC] >>> RewriteRule

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-24 Thread James H. H. Lampert
On 8/22/20 7:35 AM, Christopher Schultz wrote: (1) every http request is unconditionally redirected to https: RewriteEngine on RewriteCond %{HTTP_HOST} !^www\. [NC] RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L] This is not unconditional. That's what "RewriteCond" does: it

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 8/21/20 13:14, James H. H. Lampert wrote: > On 8/21/20 9:30 AM, Christopher Schultz wrote: > >> Why would you think that redirecting from http -> https would >> block renewal? > > Because, at least if I correctly understand what I set up,

Re: Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-21 Thread logo
Chris > Am 21.08.2020 um 18:30 schrieb Christopher Schultz > : > > Signierter PGP-Teil > James, > > On 8/18/20 19:47, James H. H. Lampert wrote: > > Something just worked, that I wasn't expecting to work. Or rather, > > I was expecting it to work, but kill cert renewal. > > > > The port 80

Something I still don't quite understand, Re: Let's Encrypt with Tomcat behind httpd

2020-08-18 Thread James H. H. Lampert
Something just worked, that I wasn't expecting to work. Or rather, I was expecting it to work, but kill cert renewal. The port 80 virtual host had RewriteEngine on RewriteCond %{HTTP_HOST} !^www\. [NC] RewriteRule ^(.*)$ https://www.%{HTTP_HOST}%{REQUEST_URI} [R=301,L] which I commented out,