Am 16.03.2017 um 15:04 schrieb Jesper Daalwijk (j.daalw...@brunelco.nl): > Hi all, > > How do I enable SOGo 3.2.7 (served by Apache 2.4) to use https only > when port 80 is not available? > > I've tried to use the mod_rewrite solution offered earlier in this > mailing list ( RewriteRule /SOGo(.*) > https://%{HTTP_HOST}%{REQUEST_URI} ) and it works as long as port 80 > is available to serve the redirection. > > However, my external users will not have access to port 80 (port 443 > only) so that solution doesn't work since SOGo switches to plain http > after login. Since the usage of port 80 should be avoided completely > in this case, is there a way to prevent SOGo from using http > entirely? >
citation: > SOGo switches to plain http after login. No, it does not, if you configured your apache correctly :-) The rewrite rule given above only redirects traffic from port 80 to 443. You also have to inform SOGo that you are using https in your 443 Virtualhost config: .... ProxyPass /SOGo http://localhost:20000/SOGo retry=1 connectiontimeout=10 timeout=60 <Proxy http://localhost:20000/SOGo> ## adjust the following to your configuration RequestHeader set "x-webobjects-server-port" "443" RequestHeader set "x-webobjects-server-name" "sogo.example.org" RequestHeader set "x-webobjects-server-url" "https://sogo.example.org"; ## When using proxy-side autentication, you need to uncomment and ## adjust the following line: # RequestHeader set "x-webobjects-remote-user" "%{REMOTE_USER}e" RequestHeader set "x-webobjects-server-protocol" "HTTP/1.0" RequestHeader set "x-webobjects-remote-host" "%{SENDER_IP_ADDRESS}e" .... "x-webobjects-server-url" tells SOGo to create response URLs with https://... prefix. sogo.example.org is an example of your Server name ;-) Perhaps you do not have Proxy and SOGo on the same machine. In this case you have to change "localhost" too and set WOPort in your sogo.conf. Kind regards, Christian Mack -- Christian Mack Universität Konstanz Kommunikations-, Informations-, Medienzentrum (KIM) Abteilung Basisdienste 78457 Konstanz +49 7531 88-4416
smime.p7s
Description: S/MIME Cryptographic Signature
