Is there a reason you dont want to use Rewrite rules? On Sat, Mar 12, 2011 at 5:27 AM, Farid Izem <farid.i...@gmail.com> wrote: > Hi, > > I'm currently working on a configuration to force HTTPS by directory. > Configuration looks like : > > <Directory /home/user/apache_data/htdocs> > SSLOptions StrictRequire > SSLRequireSSL > ErrorDocument 403 https://mywebserver.fr.world.socgen > </Directory> > > This configuration works perfectly. But i'd like to allow HTTP > connection to a particular set of IP, > for example keepalive from load balancer which are perform only in HTTP. > > First solution would be to change load balancer to make keepalive over > HTTPS. I have no money. > Second solution, redirect HTTP to HTTPS using Rewrite engine whereas > using SSLRequireSSL and ErrorDocument. > Already done and validated. > > I want to avoid RewriteRule usage. I d'like to used SSLRequire with > some conditions. > > Is it possible with > > <Directory /home/user/apache_data/htdocs> > SSLOptions StrictRequire > SSLRequireSSL > SSLRequire ( %{REMOTE_ADDR} !~ m/192\.172\.10\.[1-2]/) > ErrorDocument 403 https://mywebserver.fr.world.socgen > </Directory> > > It is not working.Can you help me please ? is SSLRequire only used in > HTTPS context only ? > > Regards, > > Farid > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > " from the digest: users-digest-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > >
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
