Base de connaissances

Hébergement web Linux - Force SSL on all pages

From .htaccess file

You can force all of your pages to use HTTPS. To do this you will need to modify your .htaccess file.

Apache’s mod_rewrite makes it easy to require SSL to be used on your site and to gently redirect users who forget to add the https when typing the URL. Using Apache to redirect http to https will make sure that your site (or a part of it) will only be accessed by your customers using SSL.  This is better than using SSLRequireSSL because users often forget to type in the https and will be automatically redirected.

Before you can set up an Apache redirect from http to https, you will need to do the following:

• Make sure your SSL certificate is successfully installed so you can access https://www.example.com
• Make sure mod_rewrite is enabled in Apache

Now you just need to edit your httpd.conf file or the file where your virtual host is specified and add these lines to redirect http to https:

Using the Code Editor in the File Manager, add these lines to the beginning of the .htaccess file.

RewriteEngine On 
RewriteCond %{SERVER_PORT} 80 
RewriteRule ^(.*)$ https://example.com/$1 [R=301,L]

RewriteEngine On
RewriteRule ^apache-redirect-http-to-https\.html$ https://www.example.com/apache-redirect-http-to-https.html [R=301,L]