Apache HSTS with non-www to www 301 redirect

Asked Dec 03 '18 at 11:25

Active Dec 03 '18 at 15:31

Viewed 104 times

Just been setting up HSTS on an Apache vHost (it is a virtualmin box) and have that working, however I am experiencing strange behavior when trying to force a call to https www rather than it redirecting to the https non www.

If I call the http www version then HSTS does its job just fine and gives me the HTTPS, non www site. However manually calling HTTPS WWW throws me a certificate error stating the name on the cert does not match the calling URL.... which I know is because I don't have www on the cert.

I have tried the usual 301 redirect in the vhost but I can still get to https www. rather than being redirected to https non www.

Any ideas folks?

Tom

edited Dec 03 '18 at 15:31

Michael Hampton

237,123
42
477
940

asked Dec 03 '18 at 11:25

tomstephens89

The SSL handshake is done before the client gets the redirect. If you want a redirect on https you need a certificate for all involved domains. There is no way around it. – Gerald Schneider Dec 03 '18 at 11:50
Fix the certificate. It should have all relevant names. – Michael Hampton Dec 03 '18 at 15:30

Apache HSTS with non-www to www 301 redirect

0 Answers0