Colin Chalmers wrote:
>
> http://localhost works
> https://localhost works
> but http://localhost:443 returns a page but does not use a secure
> connection
What do you mean by "works"? Do they all lead to the same page?
I think what is happening is the following:
http://localhost - defaults to port 80, uses HTTP protocol
https://localhost - defaults to port 443, uses "SSL" protocol (hence
secure)
http://localhost:443 - you tell it to use HTTP, but on port 443... So as
long as the server has a virtualhost on that port it will serve it via
plain HTTP.
You need to separate the SSL and HTTP directories and use the
SSLRequireSSL directive in the SSL virtual host. E.g.
<VirtualHost 192.168.1.1:80>
DocumentRoot /home/docs/plain_html
....
</VirtualHost>
<VirtualHost 192.168.1.1:443>
SSLRequireSSL
DocumentRoot /home/docs/ssl_stuff
....
</VirtualHost>
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
