Forum Moderators: phranque

Message Too Old, No Replies

htaccess for https folder

         

dikoB

8:09 pm on Mar 12, 2009 (gmt 0)

10+ Year Member



Hi,

We have this mydomain.net(ssl installed) hosted by godaddy and we also have this mydomain.com hosted from another server but currently pointing to mydomain.net. I have this .htaccess setup below so that whatever visitors type in the url either mydomain.net or mydomain.com, mydomain.com will always appear on the url but its content is from mydomain.net. Now we currently installed ssl on mydomain.net so that .../store folder will be secured.

htaccess:
----------------
RewriteEngine On
Options -MultiViews

Options +FollowSymlinks
RewriteBase /
RewriteCond %{REQUEST_URI} !/store.*
RewriteRule !\.(js¦ico¦gif¦jpg¦png¦css¦xml¦swf¦zip¦doc¦pdf¦html¦taf)$ index.php
RewriteCond %{HTTP_HOST} !^www\.mydomain\.com$ [NC]
RewriteRule ^(.*)$ [mydomain.com...] [R=301,L]
----------------
Our problem is if we redirect visitors to [mydomain.com...] when they click on the store link they get a warning that says on IE:

"There is a problem with this website's security certificate.

The security certificate presented by this website was issued for a different website's address.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server."

This might scare them away. How can i revised my .htaccess in order for this warning to be removed? is this possible?

Thanks in advance and appreciate much any help.

Regards,
diko

dikoB

11:45 pm on Mar 12, 2009 (gmt 0)

10+ Year Member



are there any alternatives for this... if .com is not possible for https// then im alright with [mydomain.net...] as a redirect to our secure store. how do i add this to my current htaccess?

Thanks,

jdMorgan

1:13 am on Mar 13, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



> The security certificate presented by this website was issued for a different website's address.

You can't fool SSL with a redirect. If you want to use or redirect from mydomain.com using SSL, purchase a certificate for it.

Or you could remove the redirect on the non-SSL site, and provide visitors with a link to your SSL site saying "Visit our secure site!"

Jim

dikoB

1:49 am on Mar 13, 2009 (gmt 0)

10+ Year Member



Thanks Jim for the enlightenment. I think I'll just use [benchmarkportal.net...] for secure store instead of [benchmarkportal.com...]

Right now I cant use/buy ssl for .com site since there's no file on that server(pointing to .net's ip) and my boss wont transfer the hosting of it to where the .net is hosted.

Regards,