PDA

View Full Version : redirect problem


Ramsy
04-29-2011, 12:15 PM
Hi,

I'm having a problem with a customer's redirect.
I've turned SSL=1 and the redirect on in directadmin.conf.
It works fine for customers trying to connect to http://www.customerdomain.com:2222.
It redirects to https://www.validsslcertificatedomein.com:2222.
Which is fine.
Now when a customer with SSL enabled, but no valid SSL cert tries to connect to httpS://www.customerdomain.com:2222 it gives a certificate error.
How am I able to redirect this customer to the server valid SSL cert as wel?

With other words I want to redirect a customers login to port 2222 always to the servers url with correct certificate.
zEitEr
04-29-2011, 12:41 PM
Hello,


option to specify the redirect host value when http is used on an https protocol.
If you've enabled SSL=1 and the User enters http, then DA will give them the server IP redirect by default. This option will allow the admin to specify the value of the hostname in the redirect, which has an added benefit of forcing them to use the host that matches the certificate to valid ssl errors.

The directadmin.conf option will be:
ssl_redirect_host=host.name.com

The default setting is for the value to not be present in the directadmin.conf.
When it's not present, the server IP will be used. With the option present, it's value will be used (even it's it's blank) so make sure it only there if you want to use it.

http://www.directadmin.com/features.php?id=801
Ramsy
04-29-2011, 12:45 PM
Hello,



http://www.directadmin.com/features.php?id=801

Yup, I know. But this isnt http > https.
It's from https > https.

Already have that the stated above configured.

This is for a client who has SSL enabled for his account, but hasn't got a valid SSL certificated yet.
The feature I am looking for is to always redirect a client (or a port 2222 request) to the server valid SSL cert at port 2222 with SSL
zEitEr
04-30-2011, 01:55 AM
Ohh, yes I see. You can try to set some kind of a reverse proxy on *:2222 and check hostname. Or, you might want to request this feature with a next DA release, since I do not know, how to make what you want with less pain.
Ramsy
04-30-2011, 02:22 AM
Ohh, yes I see. You can try to set some kind of a reverse proxy on *:2222 and check hostname. Or, you might want to request this feature with a next DA release, since I do not know, how to make what you want with less pain.

Thanks for your reply. I've requested the feature.
http://www.directadmin.com/forum/showthread.php?t=40229