Re: Apache rules and SSL

2020-08-27 Thread Stefan Gärtner via Webobjects-dev
We completely replace the "Apps/WebObjects/FooBarApp.woa" part by "App" and redirect all HTTP calls to HTTPS. In the HTTP Apache config: Redirect permanent / https://www.example.com/ In the HTTPS Apache config: RewriteRule ^/$ /App [R] RewriteRule ^/index.html$ /App

Re: Apache rules and SSL

2020-08-27 Thread Paul Hoadley via Webobjects-dev
On 28 Aug 2020, at 09:38, Jesse Tayler wrote: >Redirect permanent / https://foo.example.com/ > > Sounds smart — but doesn’t that simply change the entrance Nope. > vs force ssl/https version of all urls? Yep. Try it out. http://httpd.apache.org/docs/2.4/mod/mod_alias.html#redirect --

Re: Apache rules and SSL

2020-08-27 Thread Jesse Tayler via Webobjects-dev
On the way I notice that some URLs don’t honor secure String link = context().directActionURLForActionNamed("dash", null); I should be using a Wonder API for a regular DA url? Odd I was using that… Paul? Redirect permanent / https://foo.example.com/ Sounds smart — but

Re: Apache rules and SSL

2020-08-27 Thread Paul Hoadley via Webobjects-dev
Hi Jesse, On 28 Aug 2020, at 07:10, Jesse Tayler via Webobjects-dev wrote: > I use AWS+Route53 for SSL and I really just want to force all requests to > HTTPS and I’m having trouble This should be sufficient in vhosts.conf: ServerName foo.example.com Redirect permanent /

Re: Apache rules and SSL

2020-08-27 Thread Matthew Ness via Webobjects-dev
I terminate TLS at the ALB/NLB/(ELB). You can apply your cert chain in cert manager and apply it to your xLBs. Regards, -- Matt http://logicsquad.net https://www.linkedin.com/company/logic-squad/ On Fri, Aug 28, 2020, at 7:40 AM, Jesse Tayler via Webobjects-dev wrote: > > I use AWS+Route53

Apache rules and SSL

2020-08-27 Thread Jesse Tayler via Webobjects-dev
I use AWS+Route53 for SSL and I really just want to force all requests to HTTPS and I’m having trouble I have a few common WO rewrites to shorten URLs RewriteRule ^/signup /apps/WebObjects/MyAppName.woa/wa/signup [last,passthrough] RewriteRule ^/default