Apache2 conditional section based on port

Question

I don't know much about if statements in apache configuration, and I'm wondering if I can have a section of the configuration applied only if the request is received on a certain port.

In short, this is about SSL. I have name based virtual hosts, I can make a configuration for port 80, then duplicate it all for port 443, and add the relevant SSL configurations.

But this seems redundant. I was wondering if i can have something like:

<VirtualHost *:80 *:443>

and then I can put:

<IfModule mod_ssl.c>
    SSLEngine on
SSLCertificateFile ...
SSLCertificateKeyFile ...
SSLCACertificateFile ...
</IfModule>

inside an if statement that checks if connection is on port 443... or is such thing impossible? the server supports SNI, and I don't have any worries from non-SNI compliant browsers.

Why don't you define two virtual hosts, one on port 80 and one on port 443? — Giorgio Previtera, Jun 28 '13 at 09:58
Yeah, that's what I do now... I was just wondering if there's a less redundant way of doing it — Waleed Hamra, Jun 28 '13 at 10:06
http://serverfault.com/questions/303744/serve-http-port-80-and-https-port-443-on-same-virtualhost?rq=1 this answered my question — Waleed Hamra, Jun 29 '13 at 08:40

黄雨伞 · Accepted Answer · 2017-04-06T16:14:04.750

6

Yes, starting from Apache 2.4, you can use

<If "%{HTTPS} == 'on'">
    # HTTPS-specific configuration here
</If>

in your configuration file.

Many other expressions inside the <If "expression"> bracket are also supported, e.g. actually checking for a specific port, as you suggested. For more details see the Apache docs.

However, keep in mind that some directives will not work within an <If> clause. Check for the allowed contexts of a directive, where <If> counts as a directory context (like <Directory>).

edited Apr 06 '17 at 16:14

answered Apr 06 '17 at 15:54

黄雨伞

176
1
4

2

That's a bunch... but doesn't work with the directives for SSL: SSLEngline, SSLCertificateKeyFile, etc doesn't work inside such an If statement – Raul Luna Sep 23 '18 at 10:14

Apache2 conditional section based on port

1 Answers1