Migrating a site from http to https
Hello!
Received an SSL certificate. Now you need to change the protocol from http to https, which caused some difficulties:
- What to write in htaccess to make a redirect with (http://www.site.ru, https://www.site.ru and http://site.ru) on https://site.ru (I'm having trouble with regulars)?
- A couple of scripts are connected to the site, which can only be accessed via the http protocol. What should I do? Can is it somehow painless to attach scripts to an https site over http?
- Are there any disadvantages or problems when switching to https?
4 answers
With StackOverflow:
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [R,L]
In addition, you can make redirects by the port number, for example:
RewriteCond %{SERVER_PORT} ^80$
RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]
This will redirect all requests received on port 80 to HTTPS.
You can not insert HTTP scripts on an HTTPS site, this destroys all the security that you wanted to achieve. You go to HTTPS for this purpose?
The disadvantages or advantages of the transition depend directly on your project.
The hoster sent this option, and everything worked:
RewriteCond %{HTTP_HOST} ^www\.site\.ru [NC,OR]
RewriteCond %{HTTP:X-Forwarded-Proto} ^http$ [NC]
RewriteRule ^(.*)$ https://site.ru/$1 [R=301,L]
But now there is another problem...
Before making a redirect with https://www.site.ru -> https://site.ru the certificate is checked, and since the certificate was issued for a domain without WWW, an error is issued...
On WORDPRESS, it helped
RewriteCond %{ENV:HTTPS} !on
RewriteRule ^(.*)$https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
If you use Nginx, it is better to use the return url_state code directive. Redirection is better performed at the location level, so that the files robots.txt and sitemap.xml remained available for search engines. Context with http:
server {
listen 80;
server_name domain.tld;
server_name www.domain.tld;
location ^/robots.txt {
try_files $uri =404;
}
location ^/sitemap.xml {
try_files $uri =404;
}
location / {
return 301 https://www.domain.tld$request_uri;
}
}
Within the http context, it is desirable to enable compression:
gzip on;
gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
gzip_disable "msie6";
The article Nginx can also help you. Switching from http to https.