redirect SquirrelMail from http to https using Apache2

cccc · 09-22-2006, 08:08 AM

hi

howto redirect SquirrelMail login page from http to https using Apache2 ?

I've tried to add the following entry:

Code:

# cat /etc/apache2/sites-enabled/000-default

Alias /mail /usr/share/squirrelmail

<Directory /usr/share/squirrelmail>
        php_flag register_globals off
        Options Indexes FollowSymLinks
        <IfModule mod_dir.c>
        DirectoryIndex index.php
</IfModule>

# access to configtest is limited by default to prevent information leak
        <Files configtest.php>
        order deny,allow
        deny from all
        allow from 127.0.0.1
        </Files>
</Directory>

<IfModule mod_rewrite.c>
  <IfModule mod_ssl.c>
    <Location /mail>
      RewriteEngine on
      RewriteCond %{HTTPS} !^on$ [NC]
      RewriteRule . https://mydomain.net/mail  [L]
    </Location>
  </IfModule>
</IfModule>

but it doesn't work.

mpapet · 09-22-2006, 11:22 AM

Quote:

Originally Posted by cccc

hi

howto redirect SquirrelMail login page from http to https using Apache2 ?

I've tried to add the following entry:

Code:

# cat /etc/apache2/sites-enabled/000-default

Alias /mail /usr/share/squirrelmail

<Directory /usr/share/squirrelmail>
        php_flag register_globals off
        Options Indexes FollowSymLinks
        <IfModule mod_dir.c>
        DirectoryIndex index.php
</IfModule>

# access to configtest is limited by default to prevent information leak
        <Files configtest.php>
        order deny,allow
        deny from all
        allow from 127.0.0.1
        </Files>
</Directory>

<IfModule mod_rewrite.c>
  <IfModule mod_ssl.c>
    <Location /mail>
      RewriteEngine on
      RewriteCond %{HTTPS} !^on$ [NC]
      RewriteRule . https://mydomain.net/mail  [L]
    </Location>
  </IfModule>
</IfModule>

but it doesn't work.

It's not clear if you created a second apache ssl instance and then put squirrelmail files under that instance. (sites_enabled I believe is what they call it)

Please provide some more information.

trickykid · 09-22-2006, 10:26 PM

If you just want to redirect any traffic from http to the https so it's secure, don't mess with rewrite conditions as that is the wrong approach, just use RedirectMatch for the virtual host or in the configuration..

Code:

RedirectMatch ^/$ https://www.mydomain.net/mail

cccc · 09-23-2006, 10:02 AM

Code:

# a2enmod rewrite
Module rewrite installed; run /etc/init.d/apache2 force-reload to enable.

and:

Code:

<IfModule mod_rewrite.c>
<IfModule mod_ssl.c>
<Location /mail>
RewriteEngine on
RewriteCond %{HTTPS} !^on$ [NC]
RewriteRule . https://mydomain.net/mail [L]
</Location>
</IfModule>
</IfModule>

in /etc/apache2/sites-enabled/000-default solved my problem.

greetings
cccc