3,250
edits
Changes
Jump to navigation
Jump to search
Line 1:
Line 1: + + Line 9:
Line 11: − + − − + − − − Line 38:
Line 36: − pico 60redir-ibayname1 + − + Line 48:
Line 46: − + Line 54:
Line 52: + + − Save the file & exit+ − Ctrl o + − then+ − + + + + + + + + + + + + + + − + − − + + + + + + + + + + + + + + + + + + + + + + + + + + Line 94:
Line 131: + + + + + + + + + + + − + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
no edit summary
{{Note box|this is the default behaviour for SME since e-smith-ibays-2.4.0-10 has been released}}
== https forced redirection using custom template ==
== https forced redirection using custom template ==
====Problem:====
====Problem:====
You want to force https access to an ibay whenever you access it using http
You want to force https access to an ibay, a Web directory or all web contents of your server, whenever you access it using http
====Solution:====
====Solution:====
Create a custom template that forces the redirection from http to https
Create a custom template that forces the redirection from http to https. This is a similar method to that used to force webmail to https
This is a similar method to that used to force webmail to https
====Information:====
====Information:====
cd /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/VirtualHosts
cd /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/VirtualHosts
nano 60redir-ibayname1
Paste or type the following code including the brackets, replacing ibayname with the name of your ibay
Paste or type the following code including the brackets, replacing each occurrence of '''ibayname''' with the name of your ibay
{
{
## Redirect Web Address to Secure Address
## Redirect Web Address to Secure Address
RewriteEngine on
RewriteEngine on
RewriteRule ^/ibayname https://%{HTTP_HOST}/ibayname
RewriteRule ^/'''ibayname''' <nowiki>https://%{HTTP_HOST}/</nowiki>'''ibayname'''
## End Of Redirect
## End Of Redirect
}
}
}
}
Save the file & exit by Ctrl+x, then issue the following command
/sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf
sv t /service/httpd-e-smith/
* This is an alternative if the solution above doesn't work.
Ctrl x
{
if ($port ne "443")
{
$OUT .= <<'HERE';
# Redirect transmission Address to Secure Address
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule /'''ibayname''' <nowiki>https://%{HTTP_HOST}:443/</nowiki>'''ibayname'''
## End Of Redirect
HERE
}
}
Save the file & exit by Ctrl+x, then issue the following command
/sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf
/sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf
/etc/init.d/httpd restart
sv t /service/httpd-e-smith/
If you wish to force https access to other ibays then make additional template fragments with a different filename that contain the same code except with the ibay name changed to suit
* If you wish to force https access to other ibays then make additional template fragments with a different filename that contain the same code except with the ibay name changed to suit
eg
eg
61redir-ibayname2
61redir-ibayname2
* Alternatively if you want to force all http trafics to https, you can make a general rule like this.
mkdir -p /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/VirtualHosts
cd /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/VirtualHosts
nano 60all-httptohttps
{
if ($port ne "443")
{
$OUT .= <<'HERE';
# Redirect transmission Address to Secure Address
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) <nowiki>https://%{HTTP_HOST}%{REQUEST_URI}</nowiki>
## End Of Redirect
HERE
}
}
Save the file & exit by Ctrl+x, then issue the following command
/sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf
sv t /service/httpd-e-smith/
Warning: If you receive errors when you expand the template that refer to not finding HERE before EOF, then make sure you have no spaces before or after the HERE entry in the code
Warning: If you receive errors when you expand the template that refer to not finding HERE before EOF, then make sure you have no spaces before or after the HERE entry in the code
====Modified code to use a db setting====
From http://forums.contribs.org/index.php/topic,47451.msg234224.html#msg234224
This modifies the original code slightly & needs only one 60redir-ibay custom fragment
mkdir -p /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/VirtualHosts
cd /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/VirtualHosts
nano -w 60redir-ibay
===Alternative method using custom template and db commands===
Then paste this
{
use esmith::AccountsDB;
my $adb = esmith::AccountsDB->open_ro();
$OUT = "";
foreach my $ibay ($adb->ibays)
{
my %properties = $ibay->props;
my $key = $ibay->key;
if ($properties{'HTTPSredir'})
{
if ($properties{'HTTPSredir'} eq 'on')
{
if ($port ne "443")
{
$OUT .= " ## Redirect Web Address to Secure Address\n";
$OUT .= " RewriteEngine on\n";
$OUT .= " RewriteRule ^/$key(/.*|\$) https://%{HTTP_HOST}/$key\$1 [L,R]\n";
$OUT .= " ## End Of Redirect\n";
}
}
}
}
}
Save the file & exit by Ctrl+x, then issue the following command
/sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf
sv t /service/httpd-e-smith/
then issue this db command, you have to change '''ibayname''' to the actual name of your ibay
db accounts setprop '''ibayname''' HTTPSredir on
==Alternative methods ==
=== Block plain http using custom template and db commands===
Here is an alternative method based on this forum thread http://forums.contribs.org/index.php/topic,31772.new.html#new
Here is an alternative method based on this forum thread http://forums.contribs.org/index.php/topic,31772.new.html#new
This method requires the use of https, and will deny access if http is used.
At a command prompt do the following:
At a command prompt do the following: