Try to use the presense of http to mark a connection as insecure rather than using the presense of https to make it as secure.

This commit is contained in:
yackob03 2013-10-02 14:35:54 -04:00
parent 504bc7e04e
commit 2ff96ffd87

View file

@ -7,11 +7,11 @@ WSGIPassAuthorization On
WSGIChunkedRequest On WSGIChunkedRequest On
<VirtualHost *:80> <VirtualHost *:80>
SetEnvIf X-Forwarded-Proto https HTTPS=1 SetEnvIf X-Forwarded-Proto !http HTTPS=1
RewriteEngine On RewriteEngine On
RewriteCond %{HTTP:X-Forwarded-Proto} !https RewriteCond %{HTTP:X-Forwarded-Proto} http
RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R=permanent] RewriteRule !/status https://%{SERVER_NAME}%{REQUEST_URI} [L,R=permanent]
Alias /static /opt/python/current/app/static/ Alias /static /opt/python/current/app/static/
<Directory /opt/python/current/app/> <Directory /opt/python/current/app/>