mozilla / ssl-config-generator

Mozilla SSL Configuration Generator
https://ssl-config.mozilla.org/
Mozilla Public License 2.0
358 stars 59 forks source link

apache: Add RewriteCond for permanent redirect to https to exclude acme challenges #121

Closed DG1000 closed 3 years ago

DG1000 commented 3 years ago

I like to suggest to add the following rewrite condition to the apache ssl configuration for permanent redirect to https

RewriteCond %{REQUEST_URI} "!/.well-known/acme-challenge/"

to exclude acme challenges from rewrite. At least as a comment for users using acme challenges and want to uncomment it.

I know, this is not really an SSL configuration option itself, but it avoids confusion why acme challenges can fail.

april commented 3 years ago

My hope is to someday add the ability to check a box for automatic HTTPS via ACME. When I do, this will certainly get added.