Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a website, say www.foo.com with an IP address 1.2.3.4 I have an SSL certificate for www.foo.com and when I visit https://www.foo.com all is good. However if I visit https://1.2.3.4 it says the certificate is invalid, which is fair enough. Is there any way to get https://1.2.3.4 to redirect to https://www.foo.com using apache2 or am I stuck with it having a certificate error?

share|improve this question
2  
The warning is correct. Yes you can redirect your site. And yes it is also possible with Apache. –  mailq Nov 8 '11 at 21:02
    
How many people are likely to be visiting you by IP? –  ceejayoz Nov 8 '11 at 21:23
    
None that I know of, I was just trying to cover all bases. –  DanielGibbs Nov 9 '11 at 20:46

1 Answer 1

up vote 3 down vote accepted

No you can't redirect https without first getting the "Invalid Certificate" error if the certificate doesn't match to domain name used (in this case it's the IP 1.2.3.4 since it is manually entered).

You can redirect http://1.2.3.4 without this problem because there is no SSL handshake. But if you specify https this requires the use of SSL which in turn returns the "Invalid Certificate" error as there is no way to validate the SSL handshake.

share|improve this answer
    
The certificate does exist for the domain, just not for the IP address. So if someone visits 1.2.3.4 I am stuck with them seeing the invalid certificate error? –  DanielGibbs Nov 8 '11 at 21:11
    
Yes, pretty much. –  Driftpeasant Nov 8 '11 at 21:15
1  
Correct: the SSL handshake -- where the certificate verification happens -- takes place before anything else. So you can't redirect away without that warning, since the handshake happens before HTTP starts. –  cjc Nov 8 '11 at 21:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.