Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a domain which has a secure login through a secure central provider ( on a different server with proxypass. When I go to the login page I am redirected to The application page is rendered fine but I get a 404 for all of the .css and .js files, as it is looking for The stylesheet is located at

I have managed to redirect the urls via apache rewrites but they now render as unsecure items on a secure page.

Here is the rewrite rule I have used:

RewriteCond %{REQUEST_URI} \.(gif|jpe?g|png|css|js|swf)$
RewriteRule ^/(.*)$

Is there a way to redirect to these files through a secure url?

share|improve this question

You'll need to get your https service to serve the resources directly (without a redirect) if you want to get rid of the insecure resources warnings.

You should be able to accomplish this with a ProxyPass exception (a ! for the destination) and potentially an Alias to map to the files from the secure host; if you can provide your vhost configurations then I can be more specific about what is needed.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.