always redirect user to https

[sraustein]

Its probably a good idea to replace the default apache config on port 80 to redirect the user to https - that way you always find the django app.

Something like this would work:

<VirtualHost :80> RewriteEngine On RewriteCond %{HTTPS} off RewriteRule (.) https://%{HTTP_HOST}%{REQUEST_URI}

Trac ticket #464 component build priority minor, owner sra, created by leifj on 2013-03-14T20:54:25Z, last modified 2013-03-16T21:37:43Z

[sraustein]

One thing we have to consider is whether or not we expect that the RPKI web interface is the only application apache is going to serve on the host. Right now we do assume that at least the https service will be, but some operators may want to run it in a virtual host instead.

Trac comment by melkins on 2013-03-14T21:23:50Z

[sraustein]

I suspect its best to optimize for the 80 case which is a dedicate VM. Anyone who wants to do something different can easily manage apache themselves.

Trac comment by leifj on 2013-03-14T21:32:20Z

[sraustein]

One thing we have to consider is whether or not we expect that the RPKI web interface is the only application apache is going to serve on the host. Right now we do assume that at least the https service will be, but some operators may want to run it in a virtual host instead.

Core code should not assume that it owns Apache.

Default configuration probably should.

Trac comment by sra on 2013-03-16T18:39:18Z

[sraustein]

agreed

Trac comment by leifj on 2013-03-16T21:37:43Z