certbot / certbot/certbot

HTTPS redirect loop created

Open
#3,363 9 comments 0 reactions 1 assignee Claimed by @sagi View on GitHub
area: apache area: security enhancements bug
Dominant language
Python
Stars
33.2k
Forks
3.5k
Avg merge
6d 10h
Merged PRs (30d)
3

Description

Hello,
certbot created a redirect loop:

```
cat default_http_to_https_redirect-le-ssl.conf

ServerAdmin webmaster@localhost
ServerName mysite.de
Redirect permanent / https://mysite.de/
SSLCertificateFile /etc/letsencrypt/live/mysite.de/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/mysite.de/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf

```

I have a :80 virtualhost redirecting to :443 in one config file, and a second config file for :443 with all the website setups (both attached below). Removing the redirect stopped the loop, but led to another bug:

I had two :443 virtualhost config files, my original one and the LE one. Since only the first is read, the site configuration didn't get read. Possible cause: `_default_:443` vs. `*:443` in the virtualhosts?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.