Apache on F11. ANY APPROACH ?excluding images pdfs etc from Https ( ssl ) routi

[sieger007]

Hi Folks
I am a squat on advanced Apache work. I would get a basic SSL functionality to work.
So https://foobar.com works fine and gets me all the login windows I designed. however currently all the images and other extensions like .pdf are also using the https routing.
some image referred on that https link
e.g. https://foobar.com/loginhere.jpeg c
can be displayed using https but not http
I would like to JUST limit https usage to the login window html and ALL other images pdf's not secured html ( one that do not need password ) should use HTTP NOT HTTPS
any idea how that is done ?

[jpollard]

That should depend on the URL for those images.

If the URL is something like <img src="file.jpeg"> then the browser will fill in
the missing parts from the current URL reference. If the page was reached by
"https://foobar.com/loginhere" then the URL for the image will be "https://foobar.com/file.jpeg".

If you ARE referencing them by "http://foobar.com/file.jpeg" and it isn't working, that
may be caused by the apache configuration. It MUST be listening to both port
443 and 80 at the same time.

Can you retrieve your images with "http://foobar.com/file.jpeg" ?

[sieger007]

Thanks for the very sensible troubleshooting.
<> I cannot see http : // foobar.jpeg but https : // foobar.jpeg will work
What I cannot really find ( and Apache modules make a graduate course , as I am realizing with all the futile digging in ) is HOW do I tell apache that if you find an image file ( .jpeg or .pdf ) if it comes to https convert all that into http .Has that something to do with rewrite or redirect modules .

<> Another thing is that http : // foobar.login.html should redirect to https : // foobar.login.html
however http : // foobar.login.html will not show up at all. How do I achieve this .
Thanks again
Sam

[jpollard]

Originally Posted by sieger007

Thanks for the very sensible troubleshooting.
<> I cannot see http : // foobar.jpeg but https : // foobar.jpeg will work
What I cannot really find ( and Apache modules make a graduate course , as I am realizing with all the futile digging in ) is HOW do I tell apache that if you find an image file ( .jpeg or .pdf ) if it comes to https convert all that into http .Has that something to do with rewrite or redirect modules .

You can't. The browser is the one doing the interpretation. Using a redirect/rewrite rules will only slow the process down by requiring two
browser <=> server cycles instead of one.

<> Another thing is that http : // foobar.login.html should redirect to https : // foobar.login.html
however http : // foobar.login.html will not show up at all. How do I achieve this .
Thanks again
Sam

The redirect you are looking for is "location" and that is returned by the
server. I've not used that (except from a CGI) so I'm not sure how to
specify that in a static file.

The fact that "http :// foobar.login.html" will not show up indicates that
apache is NOT listening to port 80.

What may have happened is that you unintentionally disabled port 80
when you enabled SSL.

You may have to use a named virtual host assigned to port 80
to enable the unsecured communication. This will also require you to
define separate storage areas for the secure (HTTPS) and unsecure
(http) data. I haven't run both at the same time since v1.2 of apache,
so I'm not absolutely certain, but that is what the directions in the
/etc/httpd/conf/httpd.conf file appear to mean.

[sieger007]

Thanks
I guess what I was trying to do was avoid unnecessary traffic going via SSL i.e. images etc, but in the end unless its done at the level of code ( change the actual link to http) , it is not worth it, you are right. Server re-direction is catching the left ear with the right hand.
I have to check the iptables to see if 80 is blocked.
Many thanks again
sam

[sej7278]

also note that if you have an ssl page with http images on you'll get a warning in your browser.

[sieger007]

yes another reason why you would prefer to go all SSL or all No SSL , rather than mixed.
Yahoo use to have their mail login isolated from images and it threw those mixed env. messages.
They've gotten rid of it and gone all SSL .