Force website to use only HTTPS

hi, most simple solution would be to use .htaccess file for this..

Be sure to replace www.example.com with your actual domain name.

Or you can try this:

This will redirect http://www.domain and http://domain to https://www.domain.
No need to change any line with your domain, it will work regardless what domain you are using.

Use htaccess file and insert one of this two suggestions but not both. If you dont know what is htaccess then you should learn at least some basics or pay someone to manage your server. No point to ask such help on forum.

.htaccess is often a hidden filetype. Have you ensured you can see hidden filetypes in virtualmin?

Also, where is your website, in the webmin directory or a virtualmin virtual server? (Thus will have an impact on where your .htaccess is to be found or created)

Have you ever used https for any website before? If not, you need to read up on how to create and use ssl certificates and implementing their use in a website. Just telling webmin/virtualmin to use ssl doesnt do diddley squat without an ssl certificate for your website.

Lookup/research "letsencrypt" for example. Is your website a wordpress one or other cms like it? If so there is an additional process required from inside the cms itself to get ssl woeking properly.

Also, if your website is a static html one that has no customer accounts, i would argue ssl is a waste of time...there is no need for encryption between your website and a browser unless private data is being stored. Even with ecommerce, if you are passing off transactions to paypal, it uses paypals own gateway and ssl for payment not yours. We are getting to a stage in internet use however where ssl is being used with everything. To me this is largely paranoid thinking..but it is what it is. If people really understood how vulnerable they really are, mobile phones would be treated like leprosy was in days of old.

Can anyone kindly suggest the right code to redirect an http to https for all except one directory on public_html ei /.Well-known/acme-challenge as thats the dir created by SSL certif issuer. Can we put that dir to exceptions? Reason is when you renew the certificate letsencrypt stores and loads a test file on port 80 using http. IF we have forced http to https it gives an error. Is there any way? I use this code to redirect to https : RewriteRule ^(.*)$ https://domain.com/$1 [R,L]

I need to add code so that letsencrypt is not forced to https as it works with http Do you think this code will add an exception to letsencrypt?

RewriteCond %{REQUEST_URI} !^/.well-known/acme-challenge/

Answer from some other topic ;P

Virtualmin --> Services --> Configure Website --> Edit Directives

RewriteEngine On

under paste

RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [R]

Restart Apache

Dzintars

Answer 3 has always good for me, weird even when you search 'Force website to use only HTTPS' you cannot find this thread.

Is not time to use better software??

Confirming #16 worked a treat for me. Just make sure to remove the 4 rewrite conditions that are there (in my case there was 4 lines) otherwise you will get a bunch of too many redirect errors.

Virtualmin --> Services --> Configure Website --> Edit Directives look for RewriteEngine On

then paste directly under that: RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [R]

Restart Apache and you will be good to go.

Cheers.

According to apache, rewriterules are not the preferred way to do it. Warning here: https://wiki.apache.org/httpd/RewriteHTTPToHTTPS

The preferred method is to use a redirect. Here is the apache.org example to redirect an entire non-ssl site to the ssl version.

The virtualmin way to do it: https://www.virtualmin.com/documentation/tutorial/how-to-manage-url-redi...

I cannot paste images, so hopefully this makes sense for the options you need to fill out. Understand that https://website.url needs to be modified to suit your domain name.