/ Zope / Apsis / Pound Mailing List / Archive / 2012 / 2012-04 / port 80 redirect with keeping the full url

[ << ] [ >> ]

[ Problem with SAN (Subject Aternate Name) ... ] [ Ping errors in error log when using pound as a ... ]

port 80 redirect with keeping the full url
fatcharly(at)gmx.de		 2012-04-04 13:42:36 [ SNIP ] 
Hi,

we are running a pound 2.6f with a patch v2 by Joe Gooch. We have a webservice
configured like this:

ListenHTTP
                Address XXX.XXX.XXX.86
                Port 80
                Service
                        Redirect "https://www.domain.de"
                End
End
ListenHTTPS
                Address xxx.xxx.xxx.86
                Port 443
                Cert "/etc/pki/tls/pound/domainname/domainname.pem"
                SSLAllowClientRenegotiation 0
                SSLHonorCipherOrder 1
                Ciphers "RC4-SHA:HIGH:!ADH:!SSLv2"
                Service
                        Backend
                                Address xxx.xxx.xxx.xxx
                                Port 80
                        End

                        Session
                                Type COOKIE
                                ID "userblbbla"
                                TTL 360
                        End
                End
End
#############################
When we do a http://www.domain.de/page1.html on our Site, we get a redirect to
https://www.domain.de, which is as expected, but we are missing the
"page1.html" part. (yes the page.html part can change very often)


We can archive this in a normal termination on a apache with something like
this:
 RewriteCond %{SERVER_PORT} !443
 RewriteRule ^/(.*)$ https://www.domain.com/$1 [R=301,L]


Is it possible to let the pound act like this ?


Kind regards


fatcharly



-- 
NEU: FreePhone 3-fach-Flat mit kostenlosem Smartphone!                         
        
Jetzt informieren: http://mobile.1und1.de/?ac=OM.PW.PW003K20328T7073a
RE: [Pound Mailing List] port 80 redirect with keeping the full url
Joe Gooch <mrwizard(at)k12system.com>		 2012-04-04 16:49:29 [ SNIP ] 
You'd want the RedirectAppend option provided here:
https://github.com/goochjj/pound/commit/6987fab10d7ee47d0b46501520a934839c3085db

It may be easier to use the branch I staged for prospective 2.7... you can do
that with:

git clone git://github.com/goochjj/pound.git -b stage_for_upstream/v2.7
cd pound
configure/compile as usual

The pound.8 man page in the repo will illustrate how to use Redirect vs
RedirectAppend vs RedirectDynamic.

Joe



> -----Original Message-----
> From: fatcharly(at)gmx.de [mailto:fatcharly(at)gmx.de]
> Sent: Wednesday, April 04, 2012 7:43 AM
> To: pound(at)apsis.ch
> Subject: [Pound Mailing List] port 80 redirect with keeping the full
> url
> 
> Hi,
> 
> we are running a pound 2.6f with a patch v2 by Joe Gooch. We have a
> webservice configured like this:
> 
> ListenHTTP
>                 Address XXX.XXX.XXX.86
>                 Port 80
>                 Service
>                         Redirect "https://www.domain.de"
>                 End
> End
> ListenHTTPS
>                 Address xxx.xxx.xxx.86
>                 Port 443
>                 Cert "/etc/pki/tls/pound/domainname/domainname.pem"
>                 SSLAllowClientRenegotiation 0
>                 SSLHonorCipherOrder 1
>                 Ciphers "RC4-SHA:HIGH:!ADH:!SSLv2"
>                 Service
>                         Backend
>                                 Address xxx.xxx.xxx.xxx
>                                 Port 80
>                         End
> 
>                         Session
>                                 Type COOKIE
>                                 ID "userblbbla"
>                                 TTL 360
>                         End
>                 End
> End
> #############################
> When we do a http://www.domain.de/page1.html on our Site, we get a
> redirect to https://www.domain.de, which is as expected, but we are
> missing the "page1.html" part. (yes the page.html part can change very
> often)
> 
> 
> We can archive this in a normal termination on a apache with something
> like this:
>  RewriteCond %{SERVER_PORT} !443
>  RewriteRule ^/(.*)$ https://www.domain.com/$1 [R=301,L]
> 
> 
> Is it possible to let the pound act like this ?
> 
> 
> Kind regards
> 
> 
> fatcharly
> 
> 
> 
> --
> NEU: FreePhone 3-fach-Flat mit kostenlosem Smartphone!
> Jetzt informieren: http://mobile.1und1.de/?ac=OM.PW.PW003K20328T7073a
> 
> --
> To unsubscribe send an email with subject unsubscribe to
> pound(at)apsis.ch.
> Please contact roseg(at)apsis.ch for questions.
Re: RE: [Pound Mailing List] port 80 redirect with keeping the full url
fatcharly(at)gmx.de		 2012-04-05 16:26:18 [ SNIP ] 
Hi Joe,

when I try to compile this "git"-pund, I run into this error:

[root(at)pilotpound pound]# make
gcc -DF_CONF=\"/etc/pound.cfg\" -DVERSION=\""2.6"\" -DC_SSL=\"""\"
-DC_T_RSA=\""0"\" -DC_MAXBUF=\""0"\" -DC_OWNER=\"""\" -DC_GROUP=\"""\"
-DC_SUPER=\""0"\" -DC_CERT1L=\"""\" -g -O2 -pthread -DUPER -DNEED_STACK
-DHAVE_SYSLOG_H=1 -pthread  -D_REENTRANT -D_THREAD_SAFE -Wstrict-prototypes
-Wno-unused-result -pipe   -c -o config.o config.c
config.c:83: error: expected â=â, â,â, â;â, âasmâ or â__attribute__â
before âCNNameâ
config.c: In function âparse_HTTPSâ:
config.c:1159: error: âCNNameâ undeclared (first use in this function)
config.c:1159: error: (Each undeclared identifier is reported only once
config.c:1159: error: for each function it appears in.)
config.c: In function âparse_fileâ:
config.c:1396: error: âThreadModelâ undeclared (first use in this function)
config.c: In function âconfig_parseâ:
config.c:1524: error: âThreadModelâ undeclared (first use in this function)
config.c:1591: error: âCNNameâ undeclared (first use in this function)
At top level:
cc1: warning: unrecognized command line option "-Wno-unused-result"
make: *** [config.o] Error 1
[root(at)pilotpound pound]#


Any Suggestions are welcome

Kind regards

fatcharly


-------- Original-Nachricht --------
> Datum: Wed, 4 Apr 2012 14:49:29 +0000
> Von: Joe Gooch <mrwizard(at)k12system.com>
> An: "\'pound(at)apsis.ch\'" <pound(at)apsis.ch>
> Betreff: RE: [Pound Mailing List] port 80 redirect with keeping the full url

> You'd want the RedirectAppend option provided here:
>
https://github.com/goochjj/pound/commit/6987fab10d7ee47d0b46501520a934839c3085db
> 
> It may be easier to use the branch I staged for prospective 2.7... you can
> do that with:
> 
> git clone git://github.com/goochjj/pound.git -b stage_for_upstream/v2.7
> cd pound
> configure/compile as usual
> 
> The pound.8 man page in the repo will illustrate how to use Redirect vs
> RedirectAppend vs RedirectDynamic.
> 
> Joe
> 
> 
> 
> > -----Original Message-----
> > From: fatcharly(at)gmx.de [mailto:fatcharly(at)gmx.de]
> > Sent: Wednesday, April 04, 2012 7:43 AM
> > To: pound(at)apsis.ch
> > Subject: [Pound Mailing List] port 80 redirect with keeping the full
> > url
> > 
> > Hi,
> > 
> > we are running a pound 2.6f with a patch v2 by Joe Gooch. We have a
> > webservice configured like this:
> > 
> > ListenHTTP
> >                 Address XXX.XXX.XXX.86
> >                 Port 80
> >                 Service
> >                         Redirect "https://www.domain.de"
> >                 End
> > End
> > ListenHTTPS
> >                 Address xxx.xxx.xxx.86
> >                 Port 443
> >                 Cert "/etc/pki/tls/pound/domainname/domainname.pem"
> >                 SSLAllowClientRenegotiation 0
> >                 SSLHonorCipherOrder 1
> >                 Ciphers "RC4-SHA:HIGH:!ADH:!SSLv2"
> >                 Service
> >                         Backend
> >                                 Address xxx.xxx.xxx.xxx
> >                                 Port 80
> >                         End
> > 
> >                         Session
> >                                 Type COOKIE
> >                                 ID "userblbbla"
> >                                 TTL 360
> >                         End
> >                 End
> > End
> > #############################
> > When we do a http://www.domain.de/page1.html on our Site, we get a
> > redirect to https://www.domain.de, which is as expected, but we are
> > missing the "page1.html" part. (yes the page.html part can change very
> > often)
> > 
> > 
> > We can archive this in a normal termination on a apache with something
> > like this:
> >  RewriteCond %{SERVER_PORT} !443
> >  RewriteRule ^/(.*)$ https://www.domain.com/$1 [R=301,L]
> > 
> > 
> > Is it possible to let the pound act like this ?
> > 
> > 
> > Kind regards
> > 
> > 
> > fatcharly
> > 
> > 
> > 
> > --
> > NEU: FreePhone 3-fach-Flat mit kostenlosem Smartphone!
> > Jetzt informieren: http://mobile.1und1.de/?ac=OM.PW.PW003K20328T7073a
> > 
> > --
> > To unsubscribe send an email with subject unsubscribe to
> > pound(at)apsis.ch.
> > Please contact roseg(at)apsis.ch for questions.

-- 
Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de
RE: RE: [Pound Mailing List] port 80 redirect with keeping the full url
Joe Gooch <mrwizard(at)k12system.com>		 2012-04-05 16:44:28 [ SNIP ] 
Good catch!  Search for CNName in config.c, there should be a comma after
Threadmodel before cnname.

Let me know if that fixes it... If no-unused-result is still an issue you can
take that bit out of configure.
Joe

> -----Original Message-----
> From: fatcharly(at)gmx.de [mailto:fatcharly(at)gmx.de]
> Sent: Thursday, April 05, 2012 10:26 AM
> To: pound(at)apsis.ch
> Subject: Re: RE: [Pound Mailing List] port 80 redirect with keeping the
> full url
> 
> Hi Joe,
> 
> when I try to compile this "git"-pund, I run into this error:
> 
> [root(at)pilotpound pound]# make
> gcc -DF_CONF=\"/etc/pound.cfg\" -DVERSION=\""2.6"\" -DC_SSL=\"""\" -
> DC_T_RSA=\""0"\" -DC_MAXBUF=\""0"\" -DC_OWNER=\"""\" -DC_GROUP=\"""\" -
> DC_SUPER=\""0"\" -DC_CERT1L=\"""\" -g -O2 -pthread -DUPER -DNEED_STACK
> -DHAVE_SYSLOG_H=1 -pthread  -D_REENTRANT -D_THREAD_SAFE -Wstrict-
> prototypes -Wno-unused-result -pipe   -c -o config.o config.c
> config.c:83: error: expected â=â, â,â, â;â, âasmâ or
â__attribute__â
> before âCNNameâ
> config.c: In function âparse_HTTPSâ:
> config.c:1159: error: âCNNameâ undeclared (first use in this function)
> config.c:1159: error: (Each undeclared identifier is reported only once
> config.c:1159: error: for each function it appears in.)
> config.c: In function âparse_fileâ:
> config.c:1396: error: âThreadModelâ undeclared (first use in this
> function)
> config.c: In function âconfig_parseâ:
> config.c:1524: error: âThreadModelâ undeclared (first use in this
> function)
> config.c:1591: error: âCNNameâ undeclared (first use in this function)
> At top level:
> cc1: warning: unrecognized command line option "-Wno-unused-result"
> make: *** [config.o] Error 1
> [root(at)pilotpound pound]#
> 
> 
> Any Suggestions are welcome
> 
> Kind regards
> 
> fatcharly
> 
> 
> -------- Original-Nachricht --------
> > Datum: Wed, 4 Apr 2012 14:49:29 +0000
> > Von: Joe Gooch <mrwizard(at)k12system.com>
> > An: "\'pound(at)apsis.ch\'" <pound(at)apsis.ch>
> > Betreff: RE: [Pound Mailing List] port 80 redirect with keeping the
> > full url
> 
> > You'd want the RedirectAppend option provided here:
> >
> https://github.com/goochjj/pound/commit/6987fab10d7ee47d0b46501520a934
> > 839c3085db
> >
> > It may be easier to use the branch I staged for prospective 2.7...
> you
> > can do that with:
> >
> > git clone git://github.com/goochjj/pound.git -b
> > stage_for_upstream/v2.7 cd pound configure/compile as usual
> >
> > The pound.8 man page in the repo will illustrate how to use Redirect
> > vs RedirectAppend vs RedirectDynamic.
> >
> > Joe
> >
> >
> >
> > > -----Original Message-----
> > > From: fatcharly(at)gmx.de [mailto:fatcharly(at)gmx.de]
> > > Sent: Wednesday, April 04, 2012 7:43 AM
> > > To: pound(at)apsis.ch
> > > Subject: [Pound Mailing List] port 80 redirect with keeping the
> full
> > > url
> > >
> > > Hi,
> > >
> > > we are running a pound 2.6f with a patch v2 by Joe Gooch. We have a
> > > webservice configured like this:
> > >
> > > ListenHTTP
> > >                 Address XXX.XXX.XXX.86
> > >                 Port 80
> > >                 Service
> > >                         Redirect "https://www.domain.de"
> > >                 End
> > > End
> > > ListenHTTPS
> > >                 Address xxx.xxx.xxx.86
> > >                 Port 443
> > >                 Cert "/etc/pki/tls/pound/domainname/domainname.pem"
> > >                 SSLAllowClientRenegotiation 0
> > >                 SSLHonorCipherOrder 1
> > >                 Ciphers "RC4-SHA:HIGH:!ADH:!SSLv2"
> > >                 Service
> > >                         Backend
> > >                                 Address xxx.xxx.xxx.xxx
> > >                                 Port 80
> > >                         End
> > >
> > >                         Session
> > >                                 Type COOKIE
> > >                                 ID "userblbbla"
> > >                                 TTL 360
> > >                         End
> > >                 End
> > > End
> > > #############################
> > > When we do a http://www.domain.de/page1.html on our Site, we get a
> > > redirect to https://www.domain.de, which is as expected, but we are
> > > missing the "page1.html" part. (yes the page.html part can change
> > > very
> > > often)
> > >
> > >
> > > We can archive this in a normal termination on a apache with
> > > something like this:
> > >  RewriteCond %{SERVER_PORT} !443
> > >  RewriteRule ^/(.*)$ https://www.domain.com/$1 [R=301,L]
> > >
> > >
> > > Is it possible to let the pound act like this ?
> > >
> > >
> > > Kind regards
> > >
> > >
> > > fatcharly
> > >
> > >
> > >
> > > --
> > > NEU: FreePhone 3-fach-Flat mit kostenlosem Smartphone!
> > > Jetzt informieren:
> > > http://mobile.1und1.de/?ac=OM.PW.PW003K20328T7073a
> > >
> > > --
> > > To unsubscribe send an email with subject unsubscribe to
> > > pound(at)apsis.ch.
> > > Please contact roseg(at)apsis.ch for questions.
> 
> --
> Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir belohnen Sie
> mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de
> 
> --
> To unsubscribe send an email with subject unsubscribe to
> pound(at)apsis.ch.
> Please contact roseg(at)apsis.ch for questions.
Re: [Pound Mailing List] port 80 redirect with keeping the full url
Robert Segall <roseg(at)apsis.ch>		 2012-04-09 16:00:57 [ SNIP ] 
On Wed, 2012-04-04 at 13:42 +0200, fatcharly(at)gmx.de wrote:
> Hi,
> 
> we are running a pound 2.6f with a patch v2 by Joe Gooch. We have a
webservice configured like this:
> 
> ListenHTTP
>                 Address XXX.XXX.XXX.86
>                 Port 80
>                 Service
>                         Redirect "https://www.domain.de"
>                 End
> End
> ListenHTTPS
>                 Address xxx.xxx.xxx.86
>                 Port 443
>                 Cert "/etc/pki/tls/pound/domainname/domainname.pem"
>                 SSLAllowClientRenegotiation 0
>                 SSLHonorCipherOrder 1
>                 Ciphers "RC4-SHA:HIGH:!ADH:!SSLv2"
>                 Service
>                         Backend
>                                 Address xxx.xxx.xxx.xxx
>                                 Port 80
>                         End
> 
>                         Session
>                                 Type COOKIE
>                                 ID "userblbbla"
>                                 TTL 360
>                         End
>                 End
> End
> #############################
> When we do a http://www.domain.de/page1.html on our Site, we get a redirect
to https://www.domain.de, which is as expected, but we are missing the
"page1.html" part. (yes the page.html part can change very often)
> 
> 
> We can archive this in a normal termination on a apache with something like
this:
>  RewriteCond %{SERVER_PORT} !443
>  RewriteRule ^/(.*)$ https://www.domain.com/$1 [R=301,L]
> 
> 
> Is it possible to let the pound act like this ?
> 
> 
> Kind regards
> 
> 
> fatcharly
> 
> 
> 

1. Please make sure you run with the final 2.6
2. If the behaviour persists, it is a bug (the redirect should be to
https://www.domain.de/page.html). Let me know and we'll look into it.
-- 
Robert Segall
Apsis GmbH
Postfach, Uetikon am See, CH-8707
Tel: +41-32-512 30 19
RE: [Pound Mailing List] port 80 redirect with keeping the full url
Joe Gooch <mrwizard(at)k12system.com>		 2012-04-09 18:18:20 [ SNIP ] 
Interesting, apparently Robert implemented this in 2.1.6. (2.0 didn't have the
Append feature)  I never noticed.

My apologies, stock 2.6 should be working for you.

Try using LogLevel 2, it should issue a REDIRECT log message you can use to see
exactly what the client is being redirected to.

And ensure there's no trailing / in the URL you're providing on the Redirect
directive.

Let me know if you still have problems with stock 2.6! (or 2.7a)
Joe

> -----Original Message-----
> From: Robert Segall [mailto:roseg(at)apsis.ch]
> Sent: Monday, April 09, 2012 10:01 AM
> To: pound(at)apsis.ch
> Subject: Re: [Pound Mailing List] port 80 redirect with keeping the
> full url
> 
> On Wed, 2012-04-04 at 13:42 +0200, fatcharly(at)gmx.de wrote:
> > Hi,
> >
> > we are running a pound 2.6f with a patch v2 by Joe Gooch. We have a
> webservice configured like this:
> >
> > ListenHTTP
> >                 Address XXX.XXX.XXX.86
> >                 Port 80
> >                 Service
> >                         Redirect "https://www.domain.de"
> >                 End
> > End
> > ListenHTTPS
> >                 Address xxx.xxx.xxx.86
> >                 Port 443
> >                 Cert "/etc/pki/tls/pound/domainname/domainname.pem"
> >                 SSLAllowClientRenegotiation 0
> >                 SSLHonorCipherOrder 1
> >                 Ciphers "RC4-SHA:HIGH:!ADH:!SSLv2"
> >                 Service
> >                         Backend
> >                                 Address xxx.xxx.xxx.xxx
> >                                 Port 80
> >                         End
> >
> >                         Session
> >                                 Type COOKIE
> >                                 ID "userblbbla"
> >                                 TTL 360
> >                         End
> >                 End
> > End
> > #############################
> > When we do a http://www.domain.de/page1.html on our Site, we get a
> > redirect to https://www.domain.de, which is as expected, but we are
> > missing the "page1.html" part. (yes the page.html part can change
> very
> > often)
> >
> >
> > We can archive this in a normal termination on a apache with
> something like this:
> >  RewriteCond %{SERVER_PORT} !443
> >  RewriteRule ^/(.*)$ https://www.domain.com/$1 [R=301,L]
> >
> >
> > Is it possible to let the pound act like this ?
> >
> >
> > Kind regards
> >
> >
> > fatcharly
> >
> >
> >
> 
> 1. Please make sure you run with the final 2.6 2. If the behaviour
> persists, it is a bug (the redirect should be to
> https://www.domain.de/page.html). Let me know and we'll look into it.
> --
> Robert Segall
> Apsis GmbH
> Postfach, Uetikon am See, CH-8707
> Tel: +41-32-512 30 19
> 
> 
> --
> To unsubscribe send an email with subject unsubscribe to
> pound(at)apsis.ch.
> Please contact roseg(at)apsis.ch for questions.
Re: [Pound Mailing List] port 80 redirect with keeping the full url
fatcharly(at)gmx.de		 2012-04-10 15:16:10 [ SNIP ] 
-------- Original-Nachricht --------
> Datum: Mon, 09 Apr 2012 16:00:57 +0200
> Von: Robert Segall <roseg(at)apsis.ch>
> An: pound(at)apsis.ch
> Betreff: Re: [Pound Mailing List] port 80 redirect with keeping the full url

> On Wed, 2012-04-04 at 13:42 +0200, fatcharly(at)gmx.de wrote:
> > Hi,
> > 
> > we are running a pound 2.6f with a patch v2 by Joe Gooch. We have a
> webservice configured like this:
> > 
> > ListenHTTP
> >                 Address XXX.XXX.XXX.86
> >                 Port 80
> >                 Service
> >                         Redirect "https://www.domain.de"
> >                 End
> > End
> > ListenHTTPS
> >                 Address xxx.xxx.xxx.86
> >                 Port 443
> >                 Cert "/etc/pki/tls/pound/domainname/domainname.pem"
> >                 SSLAllowClientRenegotiation 0
> >                 SSLHonorCipherOrder 1
> >                 Ciphers "RC4-SHA:HIGH:!ADH:!SSLv2"
> >                 Service
> >                         Backend
> >                                 Address xxx.xxx.xxx.xxx
> >                                 Port 80
> >                         End
> > 
> >                         Session
> >                                 Type COOKIE
> >                                 ID "userblbbla"
> >                                 TTL 360
> >                         End
> >                 End
> > End
> > #############################
> > When we do a http://www.domain.de/page1.html on our Site, we get a
> redirect to https://www.domain.de, which is as expected, but we are missing
the
> "page1.html" part. (yes the page.html part can change very often)
> > 
> > 
> > We can archive this in a normal termination on a apache with something
> like this:
> >  RewriteCond %{SERVER_PORT} !443
> >  RewriteRule ^/(.*)$ https://www.domain.com/$1 [R=301,L]
> > 
> > 
> > Is it possible to let the pound act like this ?
> > 
> > 
> > Kind regards
> > 
> > 
> > fatcharly
> > 
> > 
> > 
> 
> 1. Please make sure you run with the final 2.6
> 2. If the behaviour persists, it is a bug (the redirect should be to
> https://www.domain.de/page.html). Let me know and we'll look into it.
> -- 
> Robert Segall
> Apsis GmbH
> Postfach, Uetikon am See, CH-8707
> Tel: +41-32-512 30 19

I´m sorry but it seems my browser was acting weired. It works like a charm on
another machine. So everything is fine for me.

Thanks for your and joe´s support

Kind regards

fatcharly

 

> 
> --
> To unsubscribe send an email with subject unsubscribe to pound(at)apsis.ch.
> Please contact roseg(at)apsis.ch for questions.

-- 
Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de
MailBoxer