ACE SSL Rewrite

Unanswered Question
Jul 28th, 2008

Hi, Gilles.


I am using ACE to terminate https, the backend server needs send http-302 redirect to http, so I would need ssl redirect to change HTTP://server1.com/xx/yy/zz to HTTPS://server1.com/xx/yy/zz.


But it never works, on the client browser side, seems like ACE only retain the URL path, give me only HTTPS://server1.com/.


I am trying to using the following actlist:


action-list type modify http SSL_ZCS_ACTLIST

ssl url rewrite location "zcs2.*"


what I missed? thanks.


Leo




  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
sachinga.hcl Tue, 07/29/2008 - 09:40

HI Leo ,


Kindly try the following command


action-list type modify http urlrewrite

ssl url rewrite location "zcs2.*"


instead of using


action-list type modify http SSL_ZCS_ACTLIST

ssl url rewrite location "zcs2.*"



Because Servers are accepting traffic on port 80. When the server sends a redirect

it is not always sent back to the client as https://.



ACE will rewrite the

location field when it sees http://server1.com/xx/yy/zz and will change it to

https://server1.com/xx/yy/zz before encrypting it back to the client.



Actions

This Discussion