Rewrite everything to https://www

gwerner

This really isn't a php question. I was just hoping someone here might have some experience with rewrite and apache.

I would like to convert the following

http://www.domain.com
www.domain.com
domain.com
https://domain.com

https://www.domain.com

The closest I gotten is with the following.

RewriteCond %{HTTP_HOST} ^domain.com [NC]
RewriteRule ^(.*)$ https://www.domain.com/$1 [R=301,L]

RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

This does everything I need except if I type https://domain.com I get a certificate mismatch error. The browser asks if I want to proceed or not and if I do then it rewrites correctly to https://www.domain.com. Is there a way to prevent this other than purchasing another certificate for https://domain.com?

I understand why I'm getting the error. I was hoping the rewrite would circumvent this?

Weedpacket

Not really; the certificate lookup is made before your server is even hit.

gwerner

Ok. Didn't know that, but makes sense.

After further work below is what works for everything except https://domain.com. If this is typed in the address bar then the user gets a certificate error. The user is presented option to proceed it will rewrite to https://www.domain.com.

To solve this I'm going to need to purchase the additional certificate for the https://domain.com correct?

RewriteCond %{HTTP_HOST} !^www\. [NC]
RewriteCond %{HTTP_HOST} ^([a-z.]+)$ [NC]
RewriteRule ^(.*)$ https://www.%1/$1 [R=301,L]

# redirect all http -> https
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

cretaceous

I have a site on https which works fine with only one cert -
and my rewrite line looks like just another way to get the same result :

RewriteCond %{HTTPS} !=on
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]

I don't know why mine works ok... Weedpacket??

gwerner

cretaceous;11005529 wrote:
I have a site on https which works fine with only one cert -
and my rewrite line looks like just another way to get the same result :

RewriteCond %{HTTPS} !=on
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]

I don't know why mine works ok... Weedpacket??

Just to follow up. I tried cretaceous method and still have the same results. I just wanted to follow up on whether this worked for me and it didn't. Just in case someone else ventured down this path. It's not that big of problem. Worst case for me is one additional certificate to prevent any browser notifications.

cretaceous

yes but another cert costs more money
I realise I have 3 sites I maintain that are https yet all use one cert each.
It must be to do with how the DNS has been set up and how 'www.site' and 'site' are related
I'm not sure what needs to be done - ask your host?

Also your site now appears as effectiveley two different sites - so Google will penalise you as it doesn't like sites with what appear to be duplicate content