Tuesday, March 05, 2019

HTTP SITE DOES NOT REDIRECT

Hi,


https://www.htbridge.com SSL test reports as follows:

------------------------------------------------------------------------------------------------------------
HTTP SITE DOES NOT REDIRECT
The HTTP version of the website does not redirect to the HTTPS
version. We advise to enable redirection.
Misconfiguration or weakness
------------------------------------------------------------------------------------------------------------

Web server configuration as follows:

------------------------------------------------------------------------------------------------------------
# $OpenBSD: httpd.conf,v 1.20 2018/06/13 15:08:24 reyk Exp $

server "xyz.com" {
listen on * port 80
location "/.well-known/acme-challenge/*" {
root "/acme"
request strip 2
}
location * {
block return 302 "https://xyz.com$REQUEST_URI"
}
}

server "xyz.com" {
listen on * tls port 443
hsts
tls {
certificate "/etc/ssl/xyz.com.fullchain.pem"
key "/etc/ssl/private/xyz.com.key"
}
location "/.well-known/acme-challenge/*" {
root "/acme"
request strip 2
}
location "/xyz.com/*" {
root "/"
fastcgi
}
}
------------------------------------------------------------------------------------------------------------

is this error justifiable considering the above configuration?

Thanks,

Kihaguru.

No comments:

Post a Comment