force SSL and no WWW on Apache

Question

I'm having trouble coming up with the proper syntax to accomplish both forcing the SSL and no WWW.

EDIT

I've been able to accomplish each task separately but when combining the two i find myself stuck in a redirection loop.

working syntax to force no WWW:

RewriteCond %{HTTP_HOST} !^domain\.com$
RewriteRule (.*) http://domain.com/$1 [R=301,L]

My attempt to force no WWW and SSL

RewriteCond %{SERVER_PORT} !^443$
RewriteCond %{HTTP_HOST} !^domain\.com$
RewriteRule (.*) https://domain.com/$1 [R=301,L]

Thanks for any suggestions!

score 1 · Accepted Answer · answered Feb 07 '11 at 15:52

1

For SSL you could use something like:

Redirect / https://domain.com/

Place this only in the section of your virtual host you configure for HTTP, not HTTPS, to not run clients into endless loops.

answered Feb 07 '11 at 15:52

initall

2,385
19
27

score 0 · Answer 2 · answered Sep 08 '14 at 15:26

I found this to work for a couple of my client sites:

# Force SSL
RewriteCond %{HTTP_HOST} ^www\.(.+)$ [NC]
RewriteRule (.*) https://%1%{REQUEST_URI} [L,R=301]

# Rewrite all http to https
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

RoUS · Answer 3 · 2011-02-07T18:26:24.350

0

By 'no WWW' I assume you mean you want to remove any 'WWW.' prefix of the hostname? Try this:

RewriteCond "%{HTTP_HOST}" "^(?:www\.)?(.*)"  [NC]
RewriteCond "%{HTTPS}"     "=on"
RewriteRule "(.*)"         "https://%1$1"     [R=301,L]

If you're doing this in a .htaccess file, change that last line to

RewriteRule "(.*)"         "https://%1/$1"    [R=301,L]

If you want to be able to remove the 'WWW.' prefix regardless of SSL-ness or not, try this:

RewriteCond "%{HTTP_HOST}" "^(?:www\.)?(.*)"  [NC]
RewriteCond "%{HTTPS}"     "=on"
RewriteRule "(.*)"         "https://%1/$1"    [R=301,L]

RewriteCond "%{HTTP_HOST}" "^(?:www\.)?(.*)"  [NC]
RewriteRule "(.*)"         "http://%1/$1"     [R=301,L]

edited Feb 07 '11 at 18:26

answered Feb 07 '11 at 15:55

RoUS

1,888
2
14
29

@RoUS I was unable to get either of these examples to work properly. – Stephen S. Feb 07 '11 at 16:28
@Stephen What happened, precisely? (/me goes to verify) – RoUS Feb 07 '11 at 16:37
@RoUS Absolutely nothing happens. – Stephen S. Feb 07 '11 at 16:55
Okey, I'm trying to get my test system going again. I'll comment shortly. – RoUS Feb 07 '11 at 17:15
@RoUS for the record i AM using .htaccess – Stephen S. Feb 07 '11 at 17:39
@Stephen Ah. And did you change the 'http://%1$1' to 'http://%1/$1' ? Do you have access to the Apache logs? – RoUS Feb 07 '11 at 17:48
@RoUS Yes, I did change the rules as you suggested. – Stephen S. Feb 07 '11 at 17:52
@Stephen Try the modified rules I put in my answer. – RoUS Feb 07 '11 at 18:27
@RoUS Still nothing. fyi, you don't need the quotes to encapsulate the conditions/rules – Stephen S. Feb 07 '11 at 18:42
@Stephen Yes, I know the quotes are unnecessary. I prefer to use them to make it clear where the parameters begin and end. So you don't get a redirect for `http://www.example.com` or `https://www.example.com` ? (comment reposted because the URIs were gobbled) – RoUS Feb 07 '11 at 19:01

score 0 · Answer 4 · answered Feb 07 '11 at 15:57

0

Here's what I'm using on one of my sites - it seems to work a little better than most of the other methods I've seen:

  # The code below tells apache to always require secure (ssl/tls) connections
  # to the website. If a client tries connecting over port 80 (http://),
  # then the client will be redirected to https:// (over port 443).
  RewriteCond %{REMOTE_ADDR} !127\.0\.0\.0
  RewriteCond %{SERVER_PORT} 80
  RewriteRule ^(.*)$ https://example.com/$1 [R,L]

For the no-www rule, check out the .htaccess files on any open-source CMS, like Drupal or Wordpress, to see some of the best practices.

answered Feb 07 '11 at 15:57

geerlingguy

4,682
8
56
92

Your syntax works perfectly for redirecting to the SSL, thanks. Unfortunately I can accomplish both feats separately but when combining them I find myself stuck in a redirect loop. RewriteCond %{HTTP_HOST} !^domain\.com$ RewriteRule (.*) http://domain.com/$1 [R=301,L] – Stephen S. Feb 07 '11 at 16:07
Yeah... that's a problem, isn't it. I haven't had to do both at once on any of my sites. – geerlingguy Feb 07 '11 at 16:20
Yeah, this is the first time i've had it come up as well. I have to force 1 type of URL system so my Jquery posts match the parent url. (ex: if the URL is domain.com jquery has to use domain.com not www.domain.com) – Stephen S. Feb 07 '11 at 16:57

force SSL and no WWW on Apache

4 Answers4

Linked

Related