How to redirect all SSL traffic?

[Igor Sysoev]

On Mon, Nov 09, 2009 at 10:23:33AM +0000, Glen Lumanau wrote:

> My question is,
> 
> Is that posibble to redirect all the traffic to www?

With the "*.mydomain.com" certificate the answer is YES.

> 
> Best Regards,
> 
> Glen Lumanau
> 
> 
> -----Original Message-----
> From: Maxim Dounin <mdounin at mdounin.ru>
> Date: Mon, 9 Nov 2009 13:17:43 
> To: <nginx at sysoev.ru>
> Subject: Re: How to redirect all SSL traffic?
> 
> Hello!
> 
> On Mon, Nov 09, 2009 at 08:11:23AM +0000, Glen Lumanau wrote:
> 
> > Yes I have a valid ssl for www.mydomain.com. I don't have a license for mydomain.com
> > 
> > That's why I want to redirect all traffic goes to mydomain.com to www.mydomain.com
> 
> As long as you have no valid cert for mydomain.com - you can't 
> handle requests in this domain without warnings from browsers.  No 
> way.
> 
> Maxim Dounin
> 
> 
> > 
> > 
> > Best Regards,
> > 
> > Glen Lumanau
> > 
> > 
> > -----Original Message-----
> > From: Igor Sysoev <is at rambler-co.ru>
> > Date: Mon, 9 Nov 2009 10:57:18 
> > To: <nginx at sysoev.ru>
> > Subject: Re: How to redirect all SSL traffic?
> > 
> > On Mon, Nov 09, 2009 at 08:49:56AM +0700, Glen Lumanau wrote:
> > 
> > > I tried this, but still doesn't works 
> > 
> > What do you mean by "doesn't work" ? Browser shows a warning about invalid
> > certificate ? In this case you need two certificates: for "www.domain.com"
> > and "mydomain.com" and you should configure servers on different IP addreses.
> > Or you can use a certificate with two Subject Alternate Names for
> > "domain.com" and "www.domain.com". Then you may use the certificate in
> > both server with single IP address.
> > 
> > > -----Original Message-----
> > > From: Alex Hunsaker [mailto:badalex at gmail.com] 
> > > Sent: 09 Nopember 2009 5:11
> > > To: glen at lumanau.web.id
> > > Cc: nginx at sysoev.ru
> > > Subject: Re: How to redirect all SSL traffic?
> > > 
> > > On Sun, Nov 8, 2009 at 03:31, Glen Lumanau <glen at lumanau.web.id> wrote:
> > > 
> > > [ please keep the mailing list cc'ed ]
> > > 
> > > > Try port 80...
> > > 
> > > >> On port 80 is sucessfull. Is there any way to do that on port 443?
> > > 
> > > Ahh ok so you want http://mydomain.com and https://mydomain.com to go
> > > to https://www.mydomain.com.
> > > 
> > > Sure something like:
> > > server {
> > > listen 80;
> > > rewrite (^.*) https://www.mydomain.com$1 permanent;
> > > }
> > > 
> > > # config for https://www.mydomain.com
> > > server {
> > >  listen 443;
> > >  ...
> > >  if ($host !~ www\.mydomain\.com) {
> > >  rewrite ^(.*) https://www.mydomain.com$1 permanent;
> > > }
> > > 
> > > }
> > > 
> > 
> > -- 
> > Igor Sysoev
> > http://sysoev.ru/en/
> > 
> 

-- 
Igor Sysoev
http://sysoev.ru/en/