You should change the csw-policy to:
 
csw-policy "ssl-portal" 

 match "portal-to-ssl" redirect "*" "*" ssl

 

You are already matching on site.sample.com, so redirect all.
 
Ronald
 
 


Met vriendelijke groet, With kind regards, 

Ronald Esveld
network engineer

Qi ict
Delftechpark 35-37
Postbus 402, 2600 AK Delft

T : +31 15 888 0 444
F : +31 15 888 0 445
E : mailto:[EMAIL PROTECTED]
I : http://www.qi.nl/
________________________________

Van: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Namens Williams, Brian
Verzonden: dinsdag 9 september 2008 18:53
Aan: [email protected]
Onderwerp: [f-nsp] http to ssl redirect issues via csw-rule



I'm attempting to do a http to ssl redirect for a website (example,
redirect http://site.sample.com to https://site.sample.com) and am not
having much luck doing so with the csw policies / rules.  Below is the
snapshot of the config I'm using pertaining to the vip and csw ... does
anyone have any suggestions or tips?  Thanks.




csw-rule "portal-to-ssl" header "host" equals "site.sample.com" 

 

csw-policy "ssl-portal" 

 match "portal-to-ssl" redirect "site.sample.com" "*" ssl

 

 

server real web1 192.168.1.1 

 port http

 port http url "HEAD /"

 port 81

 port 82

 

server real web2 192.168.1.2

 port http

 port http url "HEAD /"

 port 81

 port 82

 

server virtual vip_web 192.168.0.1

 port ssl sticky

 port ssl ssl-terminate portal

 port http

 port http csw-policy "ssl-portal"

 port http csw

 bind ssl flweb1 81 real-port http flweb2 81 real-port http

<<image/gif>>

_______________________________________________
foundry-nsp mailing list
[email protected]
http://puck.nether.net/mailman/listinfo/foundry-nsp

Reply via email to