Force SSL/HTTPS with mod_rewrite [duplicate]

by

The following solution works for both proxied and unproxied servers. So if you are using CloudFlare, AWS Elastic Load Balancing, Heroku, OpenShift or any other Cloud/PaaS solution and you are experiencing redirect loops with normal HTTPS redirects, give it a try.

RewriteEngine On

# If we receive a forwarded http request from a proxy...
RewriteCond %{HTTP:X-Forwarded-Proto} =http [OR]

# ...or just a plain old http request directly from the client
RewriteCond %{HTTP:X-Forwarded-Proto} =""
RewriteCond %{HTTPS} !=on

# Redirect to https version
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Put the rest of your rewrite rules here

More Related Contents:

  1. htaccess redirect to https://www
  2. Force SSL/https using .htaccess and mod_rewrite
  3. How do you redirect HTTPS to HTTP?
  4. Heroku NodeJS http to https ssl forced redirect
  5. Force HTTPS for specific URL
  6. How to force SSL / https in Express.js
  7. Nginx Redirect HTTP to HTTPS and non-www to ww
  8. Best Practice: 301 Redirect HTTP to HTTPS (Standard Domain)
  9. Resolving javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed Error?
  10. How to enable TLS 1.2 support in an Android application (running on Android 4.1 JB)
  11. How to redirect URLs based on query string?
  12. Disable certificate verification in PHP SoapClient
  13. PHP CURL CURLOPT_SSL_VERIFYPEER ignored
  14. Cloudfront redirect www to naked domain with ssl [closed]
  15. Get angular-cli to ng serve over HTTPS
  16. ASP.NET MVC RequireHttps in Production Only
  17. Redirecting EC2 Elastic Load Balancer from HTTP to HTTPS
  18. How to do an HTTPS POST from Android?
  19. SSL Error: unable to get local issuer certificate
  20. How to force Laravel Project to use HTTPS for all routes?
  21. mod_rewrite: remove query string from URL?
  22. Insecure content in iframe on secure page
  23. Correctly switching between HTTP and HTTPS using .htaccess
  24. How can I know if the request to the servlet was executed using HTTP or HTTPS?
  25. mod_rewrite: what does this RewriteRule do?
  26. Redirect HTTP to HTTPS on default virtual host without ServerName
  27. javax.net.ssl.sslpeerunverifiedexception no peer certificate
  28. htaccess RewriteRule page with query string
  29. How can I have CodeIgniter load specific pages using SSL?
  30. How can I make Android Volley perform HTTPS request, using a certificate self-signed by an Unknown CA?

Leave a Comment