how can I configure apache httpd 2.x to force ssl when a certain URL is called ? For instance, let http://www.mycompany.com be plain-text by default, except when a user opens http://www.mycompany.com/secure (and anything below) it forces https://www.mycompany.com/secure.

Thanks

link|improve this question

feedback

2 Answers

up vote 5 down vote accepted

You can use mod_rewrite to do this:

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/secure(.*) https://www.mycompany.com/secure$1 [R,L]
link|improve this answer
feedback

You should enable mod_rewrite and add the following to your Apache config:

RewriteEngine On 
RewriteCond %{SERVER_PORT} 80 
RewriteCond %{REQUEST_URI} secure 
RewriteRule ^(.*)$ https://www.mycompany.com/secure/$1 [R,L]
link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.