proxy_redirect not working with https, redirect to http instead of https

[Alain Spineux]

On Nov 14, 2007 1:03 PM, Igor Sysoev <is at rambler-co.ru> wrote:
> On Wed, Nov 14, 2007 at 12:54:20PM +0100, Alain Spineux wrote:
>
> > Hi
>
> > I use nginx to provide an HTTPS access.
> > Everything works except when my apps make redirection, the url is well rewritten
> > but the http is not rewrittent into https, ginving
> > http://eg01.emailgency.loc/eg/addr/
> > instead of
> > https://eg01.emailgency.loc/eg/addr/
> >
> > I installed nginx 6.16 to test last "mail" features,
> > but expect to downgrade to stable version.
> >
> >     server {
> >         listen               443;
> >         server_name     eg01.emailgency.loc;
> >         ssl                  on;
> >         ssl_certificate      /kolab/etc/kolab/cert.pem;
> >         ssl_certificate_key  /kolab/etc/kolab/key.pem;
> >
> >         location /eg/ {
> >             proxy_pass            http://localhost:8080/eg/;
> >             proxy_redirect        default;
> >             #proxy_redirect        http://localhost:8080/eg/
> > https://eg01.emailgency.loc/eg/; # don't work !
> >             proxy_set_header      Host $host;
> >             proxy_set_header      X-Real-IP $remote_addr;
> >         }
> >
> >     }
> >
> > If I add this
> >
> >     server {
> >         listen               80;
> >         rewrite ^(.*)        https://eg01.emailgency.loc$1 redirect;
> >     }
> >
> > then its works but with one more redirection
>
> Try
>
> -             proxy_redirect        default;
> +             proxy_redirect        http://eg01.emailgency.loc/  /;

Right, it works tanks Igor.

For the other (and me later :-),  here is the explanations :

When I request :

https://eg01.emailgency.loc/eg/welcome/
My browser build the reques as :

GET /eg/welcome/ HTTPS
Host: eg01.emailgency.loc

Nginx replace /eg/ by /eg/ :-)
and send the identical request using a different protocol "http" to a
different port, but this port is not
updated in "Host:" field because of

proxy_set_header      Host $host;

The request become :

GET /eg/welcome/ HTTP   (here it lost the S)
Host: eg01.emailgency.loc

My application when building a "redirect"  use Host field and return

Location: http://eg01.emailgency.loc/eg/login/

then
             proxy_redirect        http://eg01.emailgency.loc/  /;

just adjust the protocol 'https' the default host
'eg01.emailgency.loc' and return

Location: httpS://eg01.emailgency.loc/eg/login/

BUT if I want to use

             proxy_redirect        default;

I must remove

            proxy_set_header      Host $host;

or replace it by

            proxy_set_header      Host localhost:8080;

Then the "proxy_redirect default" match and works.

Thanks


>
>
> --
> Igor Sysoev
> http://sysoev.ru/en/
>
>



-- 
Alain Spineux
aspineux gmail com
May the sources be with you