Redirect non-www ssl traffic to www ssl (apache)

Question

I'm attempting to get a redirect which is failing, and for some reason I can't think today. I have a vHost file within HTTPD that listens on standard port 80 and port 443. I'm attempting to redirect https://domain.com/(.*) to https://www.domain.com/$1 so that the URL remains intact.

My config is as follows:

ServerName www.domain.com
ServerAlias tempdomain.testdomain.co.uk
ServerAlias domain.com

My rerwrite rule I'm using is.

RewriteCond %{HTTP_HOST} ^domain\.com$
RewriteRule ^(.*)$ https://www.domain.com$1 [R=301,L]

I've also tried removing the \. and $ but nothing.. When I visit the url https://domain.com/secure.page?action=comp it doesn't redirect to https://www.domain.com/secure.page?action=comp I do also have other SSL pages, the above was just an example..

Can anyone point out my stupidity.

Answer 1

I can't see anything wrong with your rewrite rule. Are you sure :

RewriteEngine on 

has been specified and this config is definitely being executed? Is it in a .htaccess file?

Try setting up a rewrite log it can help:

http://www.latenightpc.com/blog/archives/2007/09/05/a-couple-ways-to-debug-mod_rewrite

Answer 2

In addition to using a rewrite, please enable HTTP Strict Transport Security. It's easy, and helps to defend against man-in-the-middle attacks on your visitors.

# load module (example using [RHEL])
LoadModule headers_module modules/mod_headers.so

# Use HTTP Strict Transport Security to force client to use secure connections only
Header set Strict-Transport-Security "max-age=86400"
Header append Strict-Transport-Security includeSubDomains

http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

Answer 3

this is all you need

RewriteCond %{HTTP_HOST} ^domain\.com
RewriteRule ^(.*)$ https://www.domain.com$1 [R=permanent,L]

this rule definitely works for me in Apache 2.2

Answer 4

I think that you are missing the "RewriteEngine On" line in your configuration, Here is an examle of how it shold all look like:

ServerName www.domain.com
ServerAlias tempdomain.testdomain.co.uk
ServerAlias domain.com 

RewriteEngine On
RewriteRule /.* https://www.domain.com/ [R]

Thanks and hope it works, RayQuang

Answer 5

Try enabling the RewriteLog and see if that shows what the error is. In your httpd.conf file (or in your <VirtualHost> directive) add the following:

RewriteLog "/path/to/some/file.log"
RewriteLogLevel 9

DO NOT KEEP THIS LIKE THAT!!!!!! RewriteLogLevel 9 is very slow so it should not be used like that in production, just for testing. But enable that (and reload Apache of course) and check the log file to see what happens when you go to https://domain.com/secure.page?action=comp.

If you're still not sure of the problem, edit your question and post the relevant parts of the rewritelog.