Now that mod_md has landed in trunk, I am looking at more ways to simplify a SSL configuration. Looking at the Listen directive, it has an optional 2nd protocol parameter.
Would it be unreasonable to assume that a Listen NNN https means that "SSLEngine on" should be the default in all <VirtualHost *:NNN> ServerName xxx.yyy ... </VirtualHost> sections? Would we expect breakage by such a change? What about name-based virtual hosts that apply to _all_ addresses and ports? E.g. something like: <VirtualHost> ServerName xxx.yyy ... <If "%{HTTPS} != 'on'"> Redirect permanent "/" "https://xxx.yyy/" </If> ... </VirtualHost> Do you find that ugly/feasible/desirable? -Stefan