[SOLVED] Redirect http to https

[KevinH]

Maybe that only catches https on port 80. So if you tried:

https://server:80/

Seems like some more searching is in place to get this to redirect http requests to 80.

[Kevin Krause]

After a lot of fiddling with server.xml and Login.jsp I've given up for now... I'll dig deeper into that when I find the time.

[Kevin Krause]

After all, it's not that hard... I had to change very few lines in ~zimbra/tomcat/webapps/zimbra/public/Login.jsp
Here's a diff - left=old, right=new:

112,113c112
<                       qs = emptyQs? "?initMode=" + currentProto: qs + "&initMode=" + 
<                       currentProto;
---
>                       qs = emptyQs? "?initMode=https": qs + "&initMode=https"; 
123c122
<               qs = emptyQs? "?initMode=" + currentProto: qs + "&initMode=" + currentProto;
---
>               qs = emptyQs? "?initMode=https": qs + "&initMode=https";

That does the trick for me. Basically, I just changed all occurrences of

initMode=" + currentProto

to

initMode=https"

[KevinH]

Kevin, Can you post this to bugzilla with your reasons to change it. IT can then be considered for a future release.

[jonnyRo]

My setup redirects automatically. I think this has been fairly consistent over the last few releases too.

Could there be a firewall blocking port 80 access to your machine?

[zzzzsg]

u mean zmtlsctl mixed ?

thanks

Originally Posted by jonnyRo

My setup redirects automatically. I think this has been fairly consistent over the last few releases too.

Could there be a firewall blocking port 80 access to your machine?

[msonen]

"zmtlsctl redirect" worked for me.

[jones0610]

I would like to force redirects to SSL for the same reasons as the OP. But at this point, my problem is more basic.

Out of the box open source Zimbra install yesterday, which went fine. First time using Zimbra. I was VERY surprised that the webmail user login was via port 80. Assumed that it would be via SSL.

I'm getting no response from https at all. Looks like it's just not running. The admin console (port 7071) works correctly via https.

Is the web server using something other than 443 for user login SSL and if so, what port? (and why not 443?)

TIA

[msonen]

Check your firewall settings.. Make sure there is a rule allowing 443

[jones0610]

Thanks for the response. I allow everything from localhost and from my console PC. There is a rule allowing 443 but the connect request is accepted by iptables long before it gets there.

[root@security network-scripts]# telnet localhost 443
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused
telnet: Unable to connect to remote host: Connection refused
[root@security network-scripts]# telnet localhost 80
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
Connection closed by foreign host.
[root@security network-scripts]#