【发布时间】:2015-12-05 12:11:04
【问题描述】:
我有一个 owncloud 设置,我正在尝试永久 http 重定向到 https。
当我输入 https://sub.domain.com 时,我的 https conf 工作正常。 但是http://sub.domain.com 会重定向到 debian apache 默认页面。
我也在尝试实现正确的 Strict-Transport-Security HTTP 标头配置。
我的设置是:
<VirtualHost *:80>
ServerAdmin info@domain.com
ServerName sub.domain.com
ServerAlias www.sub.domain.com
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
ErrorLog /var/www/owncloud/error.log
</VirtualHost>
<IfModule mod_ssl.c>
<VirtualHost _default_:443>
ServerAdmin info@domain.com
ServerName sub.domain:443
DocumentRoot /var/www/owncloud/public_html
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
SSLEngine on
SSLCertificateFile /etc/ssl/cloud/sub.domain.com.crt
SSLCertificateKeyFile /etc/ssl/cloud/sub.domain.com.key
SSLCertificateChainFile /etc/ssl/cloud/sub.domain.com.ca-bundle
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory /usr/lib/cgi-bin>
SSLOptions +StdEnvVars
</Directory>
<IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
</IfModule>
BrowserMatch "MSIE [2-6]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
# MSIE 7 and newer should be able to use keepalive
BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
</VirtualHost>
</IfModule>
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
【问题讨论】: