.htaccess redirecting non SSL Domain to another SSL Domain

See also questions close to this topic

• Apache2 can't use SSL after upgrade (Solved)

  After a global upgrade (apt-get upgrade) Apache2 won't work with SSL anymore.

  Ubuntu 16

  Apache version : 2.4.37

  OpenSSL version : OpenSSL 1.1.1-pre7 (beta) 29 May 2018

  LD_LIBRARY_PATH=/usr/local/lib

  When I try to start the service I get the following error :

  Dec 12 18:43:59 labo apachectl[1677]: apache2: Syntax error on line 146 of /etc/apache2/apache2.conf: Syntax error on line 2 of /etc/apache2/mods-enabled/ssl.load: Cannot load /usr/lib/apache2/modules/mod_ssl.so into server: /usr/lib/apache2/modules/mod_ssl.so: symbol SSL_CTX_set_post_handshake_auth, version OPENSSL_1_1_1 not defined in file libssl.so.1.1 with link time reference

  If I disable ssl from apache2 I can successfully start the service.

  I tried to reinstall apache2 & openssl, it doesn't get any better.

  Google can't help.

  Any idea ?

  ---

  Found the problem :

  The OpenSSL version I was using was the wrong one. I compiled OpenSSL1.1.1-pre7 several months ago to fit some security requirements. Apparently the upgrade didn't update OpenSSL to the good version (OpenSSL 1.1.1 11 Sep 2018).

  the following steps made the correction :

  ~# sudo a2dismod ssl
  ~# sudo apt-get purge openssl
  ~/openssl-1.1.1-pre7# make uninstall //Uninstall the version I build
  ~# sudo apt-get install openssl
  ~# sudo a2enmod ssl
  
• Can't install wordpress on localhost

  Every time I'm trying to install wordpress from the address: localhost/wordpress

  It's showing the "Parent Directory"

  Apache/2.4.29 (Win32) OpenSSL/1.0.2l PHP/7.1.11 Server at localhost Port 80.
  

  

  Can anybody give me a solution?
• How to calculate the current date using only the time() function in Php?

  I need to calculate the current date using only the time() function in Php? Please note that I do not want to use the date() function or any other function with it. I need to accomplish this task using native Php code.
• How to maintain static files for different domains pointing at the same server

  Am working on a project that will run for multiple countries.

  mydomain.com
  mydomain.co.ke
  mydomain.co.sa
  

  All the domains are pointing to the same folder.

  My challenge is that I have few pages that should be unique for each country.

  Example of such page is the XML feed page

  Please how do I achieve that

  Thanks
• Wordpress custom htaccess rewrite

  My current wordpress permalink settings is - http://localhost/%postname%/

  If I create a post a post slug is "white___2018-12-11___flower" then the url looks like "http://localhost/white___2018-12-11___flower/". I want to rewrite this url again in htaccess and it need to look like "http://localhost/white/2018-12-11/flower/"

  Please help me. Click here to view the image
• Getting dynamic URL's to work without adding pages to WordPress admin

  I have this URL:

  example.com/parent/

  I have created this page in WordPress and it uses the template page-parent.php

  Is there a way I can create pages dynamically under this that uses this template without adding a page to WordPress, I know I can do this with a query variable

  e.g. example.com/parent/?q=17

  but I want to know if I can have:

  example.com/parent/child1/

  example.com/parent/child2/

  Without adding these as 'Pages' and using the parent template.
• Bypassing SNI-based HTTPS Filtering with netfilter queue

  Facebook and YouTube are blocked in my country. But, if I connect with openssl to Facebook, it works without problems.

  openssl s_client -connect facebook.com:443
  

  If add -servername params to openssl, it doesn't work!

  openssl s_client -connect facebook.com:443 -servername facebook.com
  

  I want to remove SNI extention from every Client Hello request. For this, I wrote this code:

  #include <stdio.h>
  #include <stdlib.h>
  #include <string.h>
  #include <unistd.h>
  #include <stdbool.h>
  #include <netinet/ip.h>
  #include <netinet/ip6.h>
  #include <linux/tcp.h>
  //#include <netinet/in.h>
  #include <linux/types.h>
  #include <linux/netfilter.h>    /* for NF_ACCEPT */
  #include <libnetfilter_queue/libnetfilter_queue.h>
  #include <getopt.h>
  #include <fcntl.h>
  #include <pwd.h>
  
  uint8_t read_uint8(unsigned char **data) {
      uint8_t value = (*data)[0];
      *data += 1;
      return value;
  }
  
  uint16_t read_uint16(unsigned char **data) {
      uint16_t value = ((*data)[0] << 8) | (*data)[1];
      *data += 2;
      return value;
  }
  
  bool proto_check_ipv4(const unsigned char *data, int len)
  {
      return len >= 20 && (data[0] & 0xF0) == 0x40 && len >= ((data[0] & 0x0F) << 2);
  }
  
  void proto_skip_ipv4(unsigned char **data, int *len)
  {
      int l;
  
      l = (**data & 0x0F) << 2;
      *data += l;
      *len -= l;
  }
  
  bool proto_check_tcp(const unsigned char *data, int len)
  {
      return len >= 20 && len >= ((data[12] & 0xF0) >> 2);
  }
  
  void proto_skip_tcp(unsigned char **data,int *len)
  {
      int l;
  
      l = ((*data)[12] & 0xF0) >> 2;
      *data += l;
      *len -= l;
  }
  
  bool proto_check_tls_handshake(const unsigned char *data, int len)
  {
      return len >= 5 && data[0] == 0x16 && len >= (((data[3] << 8) | data[4]) + 5);
  }
  
  void proto_skip_tls_handshake(unsigned char **data, int *len)
  {
      *len = (((*data)[3] << 8) | (*data)[4]);
      *data += 5; //handshake header length
  }
  
  bool proto_check_tls_client_hello(const unsigned char *data, int len)
  {
      return len >= 4 && data[0] == 0x01 && len >= ((data[1] << 16) || (data[2] << 8) || data[3]);
  }
  
  void proto_skip_tls_client_hello(unsigned char **data, int *len) {
      *len = (((*data)[1] << 16) | ((*data)[2] << 8) | (*data)[3]);
      *data += 4; //client hello header
  }
  
  unsigned short ip_checksum(unsigned short* ip, int len){
      long sum = 0;  /* assume 32 bit long, 16 bit short */
  
      while(len > 1){
          sum += *ip;
          ip++;
  
          if(sum & 0x80000000)   /* if high order bit set, fold */
              sum = (sum & 0xFFFF) + (sum >> 16);
  
          len -= 2;
      }
  
      if(len)       /* take care of left over byte */
          sum += (unsigned short) *(unsigned char *)ip;
  
      while(sum>>16)
          sum = (sum & 0xFFFF) + (sum >> 16);
  
      return ~sum;
  }
  
  uint16_t tcp_checksum(const void *buff, int len, in_addr_t src_addr, in_addr_t dest_addr)
  {
      const uint16_t *buf = (const uint16_t *)buff;
      uint16_t *ip_src=(uint16_t *)&src_addr, *ip_dst=(uint16_t *)&dest_addr;
      uint32_t sum;
      int length=len;
  
      // Calculate the sum
      sum = 0;
      while (len > 1)
      {
          sum += *buf++;
          if (sum & 0x80000000)
              sum = (sum & 0xFFFF) + (sum >> 16);
          len -= 2;
      }
      if ( len & 1 )
      {
          // Add the padding if the packet lenght is odd
          uint16_t v=0;
          *(uint8_t *)&v = *((uint8_t *)buf);
          sum += v;
      }
  
      // Add the pseudo-header
      sum += *(ip_src++);
      sum += *ip_src;
      sum += *(ip_dst++);
      sum += *ip_dst;
      sum += htons(IPPROTO_TCP);
      sum += htons(length);
  
      // Add the carries
      while (sum >> 16)
          sum = (sum & 0xFFFF) + (sum >> 16);
  
      // Return the one's complement of sum
      return (uint16_t)(~sum);
  }
  
  void tcp_fix_checksum(struct tcphdr *tcp, int len, in_addr_t src_addr, in_addr_t dest_addr)
  {
      tcp->check = 0;
      tcp->check = tcp_checksum(tcp,len,src_addr,dest_addr);
  }
  
  bool processPacketData(unsigned char *data, int len)
  {
      struct iphdr *iphdr = NULL;
      struct tcphdr *tcphdr = NULL;
      uint8_t proto;
      int len_tcp;
      unsigned char *phost;
  
      if (proto_check_ipv4(data,len))
      {
          iphdr = (struct iphdr *) data;
          proto = iphdr->protocol;
          proto_skip_ipv4(&data, &len);
      }
  
      if (proto !=IPPROTO_TCP || !proto_check_tcp(data,len))
          return false;
  
      unsigned char* ip_length_start = (unsigned char *)&iphdr->tot_len;
      int ip_total_len = read_uint16(&ip_length_start);
      ip_length_start -= 2;
  
      tcphdr = (struct tcphdr *) data;
      len_tcp = len;
      proto_skip_tcp(&data, &len);
  
      if (!proto_check_tls_handshake(data, len))
          return false;
  
      unsigned char* tls_length_start = data + 3;
  
      proto_skip_tls_handshake(&data, &len);
  
      int tls_len = len;
  
      printf("TLS len: %d\n", tls_len);
      if (!proto_check_tls_client_hello(data, len))
          return false;
  
      unsigned char* client_hello_length_start = data + 1;
  
      proto_skip_tls_client_hello(&data, &len);
  
      int client_hello_len = len;
  
      printf("Client hello length: %d\n", client_hello_len);
  
      data += 2; //version
      data += 32; //random
  
      int session_id_len = read_uint8(&data); //session id length
      data += session_id_len; //skip session id
  
      printf("Session length: %d\n", session_id_len);
  
      uint16_t cipher_suites_len = read_uint16(&data);
      data += cipher_suites_len; //skip cipher
  
      printf("Cipher length: %d\n", cipher_suites_len);
  
      uint8_t compression_methods_len = read_uint8(&data);
      data += compression_methods_len; //ckip compression_methods
  
      printf("Compression length: %d\n", compression_methods_len);
  
      unsigned char* extensions_length_start = data;
  
      uint16_t extensions_len = read_uint16(&data);
      uint16_t extensions_len_ = extensions_len;
  
      printf("EXT: %d\n", extensions_len);
  
      uint32_t extl = 0;
      uint8_t ext[2048] = {0};
  
      while(extensions_len > 0) {
          uint16_t ext_type = read_uint16(&data);
          uint16_t ext_len = read_uint16(&data);
  
          printf("%d %d %d\n", ext_type, ext_len, extensions_len);
  
          extensions_len -= 2; //ext type
          extensions_len -= 2; //ext len
          extensions_len -= ext_len;
  
          if (ext_type != 0) //server_name bo`lmasa
          {
              memcpy(ext + extl, data - 4, ext_len + 4);
              extl += 4 + ext_len;
          }
  
          data += ext_len;
      }
  
      extensions_length_start[0] = (uint8_t )(extl >> 8);
      extensions_length_start[1] = (uint8_t )(extl & 0xFF);
  
      int diff = extensions_len_ - extl;
      printf("Diff: %d\n", diff);
  
      tls_len -= diff;
      client_hello_len -= diff;
  
      printf("New TLS len: %d\n", tls_len);
      printf("New Client Hello len: %d\n", client_hello_len);
  
      tls_length_start[0] = (uint8_t )(tls_len >> 8);
      tls_length_start[1] = (uint8_t )(tls_len & 0xFF);
  
      client_hello_length_start[0] = (uint8_t )(client_hello_len >> 16);
      client_hello_length_start[1] = (uint8_t )(client_hello_len >> 8);
      client_hello_length_start[2] = (uint8_t )(client_hello_len & 0xFF);
  
      memcpy(extensions_length_start + 2, ext, extl);
  
      printf("IPHDR: %d %d\n", ip_total_len, ip_total_len-diff);
      ip_total_len -= diff;
  
      ip_length_start[0] = (uint8_t )(ip_total_len >> 8);
      ip_length_start[1] = (uint8_t )(ip_total_len & 0xFF);
  
      tcp_fix_checksum(tcphdr,len_tcp,iphdr->saddr,iphdr->daddr);
  
      iphdr->check = 0;
      iphdr->check = ip_checksum((unsigned short*)iphdr, 20);
  
      printf("Checksum: %x %x\n", tcphdr->check, iphdr->check);
  
      return true;
  }
  
  static int cb(struct nfq_q_handle *qh, struct nfgenmsg *nfmsg, struct nfq_data *nfa, void *cookie)
  {
      int id,len;
      struct nfqnl_msg_packet_hdr *ph;
      unsigned char *data;
  
      ph = nfq_get_msg_packet_hdr(nfa);
      id = ph ? ntohl(ph->packet_id) : 0;
  
      len = nfq_get_payload(nfa, &data);
  
      if (len >= 0)
      {
          if (processPacketData(data, len)) {
              //            for(int i = 0; i < len; i++) {
              //                printf("%c ", data[i]);
              //            }
              //            printf("\n");
              return nfq_set_verdict(qh, id, NF_ACCEPT, len, data);
          }
      }
  
      return nfq_set_verdict(qh, id, NF_ACCEPT, 0, NULL);
  }
  
  bool droproot(uid_t uid, gid_t gid)
  {
      if (uid)
      {
          if (setgid(gid))
          {
              perror("setgid: ");
              return false;
          }
          if (setuid(uid))
          {
              perror("setuid: ");
              return false;
          }
      }
      return true;
  }
  
  int main(int argc, char **argv)
  {
      struct nfq_handle *h;
      struct nfq_q_handle *qh;
  
      int fd;
      int rv;
      int qnum = 1;
  
      char buf[4096] __attribute__ ((aligned));
  
      uid_t uid=0;
      gid_t gid;
  
      printf("opening library handle\n");
      h = nfq_open();
      if (!h) {
          fprintf(stderr, "error during nfq_open()\n");
          exit(1);
      }
  
      printf("unbinding existing nf_queue handler for AF_INET (if any)\n");
      if (nfq_unbind_pf(h, AF_INET) < 0) {
          fprintf(stderr, "error during nfq_unbind_pf()\n");
          exit(1);
      }
  
      printf("binding nfnetlink_queue as nf_queue handler for AF_INET\n");
      if (nfq_bind_pf(h, AF_INET) < 0) {
          fprintf(stderr, "error during nfq_bind_pf()\n");
          exit(1);
      }
  
      printf("binding this socket to queue '%u'\n", qnum);
      qh = nfq_create_queue(h, qnum, &cb, NULL);
      if (!qh) {
          fprintf(stderr, "error during nfq_create_queue()\n");
          exit(1);
      }
  
      printf("setting copy_packet mode\n");
      if (nfq_set_mode(qh, NFQNL_COPY_PACKET, 0xffff) < 0) {
          fprintf(stderr, "can't set packet_copy mode\n");
          exit(1);
      }
  
      fd = nfq_fd(h);
  
      if (droproot(uid,gid))
      {
          printf("Success\n");
          while ((rv = recv(fd, buf, sizeof(buf), 0)) && rv >= 0)
          {
              for(int i = 0; i < 12; i++) {
                  printf("%x-", buf[i]);
                  if (i == 6) printf("\n");
              }
  
              printf("\n");
  
              int r=nfq_handle_packet(h, buf, rv);
              if (r) fprintf(stderr,"nfq_handle_packet error %d\n",r);
          }
      }
  
      printf("unbinding from queue 0\n");
      nfq_destroy_queue(qh);
  
  #ifdef INSANE
      /* normally, applications SHOULD NOT issue this command, since
      * it detaches other programs/sockets from AF_INET, too ! */
      printf("unbinding from AF_INET\n");
      nfq_unbind_pf(h, AF_INET);
  #endif
  
      printf("closing library handle\n");
      nfq_close(h);
  }
  

  iptables rule:

  iptables -t mangle -I POSTROUTING -p tcp --dport 443 -m set --match-set zapret dst -j NFQUEUE --queue-num 1 --queue-bypass
  

  ipset:

  ipset -N zapret
  ipset -A zapret usa.gov
  

  I use tshark to analysing:

  tshark -i eth1 -f "dst 54.85.132.205"
  

  Everything works fine except one:

  Capturing on 'eth1'
  1 0.000000000 * → 54.85.132.205 TCP 74 48852 → 443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=44927313 TSecr=0 WS=128
  2 0.188082035 * → 54.85.132.205 TCP 66 48852 → 443 [ACK] Seq=1 Ack=1 Win=29312 Len=0 TSval=44927360 TSecr=152450118
  3 0.188441788 * → 54.85.132.205 TLSv1 258 Client Hello [ETHERNET FRAME CHECK SEQUENCE INCORRECT]
  

  Why tshark give [ETHERNET FRAME CHECK SEQUENCE INCORRECT] error!

  I wanted to change the Ethernet FCS, but could not.

  How can I set ethernet FCS?

  Or, where can I find a tool to remove SNI from request?

  Update:

  I change server_name value, but, it doesn't work.

  ...
  proto_skip_tls_client_hello(&data, &len);
  
  if ((phost = find_bin(data, len, "usa.gov", 7))) 
  {
      phost[0] = 'b';
      printf("Found: %.7s\n", phost);
  }
  ...
  

  It works:

  openssl s_client -connect youtube.com:443 -servername buotube.com
  
• docker-compose over https Self-Signed

  I want to run local app over https in docker. But still don't know how.

  My docker-compose.yml:

  version: '2'
  
  services:
     proxy:
      build: './proxy/'
      restart: always
      networks:
        - front-tier
      depends_on:
        - apache
      ports:
        - "8080:80"
        - "443:443"
     apache:
      image: httpd
      restart: always
      ports:
        - "5000"
      networks:
        - front-tier
  networks:
    front-tier:
  

  Dockerfile in ./proxy/:

  FROM nginx:alpine
  
  COPY nginx.conf /etc/nginx/nginx.conf
  COPY certificate.crt /etc/nginx/ssl/certificate.crt
  COPY certificate.key /etc/nginx/ssl/certificate.key
  

  certificate.key and certifcate.crt was created by:

  openssl req -new -x509 -nodes -sha256 -days 365 -key certificate.key -out certificate.crt
  

  and the nginx.conf:

  events {
    worker_processes 2;
      worker_connections 1024;
  }
  
  http {
    server {
      listen 80 default_server;
      listen [::]:80 default_server ipv6only=on;
      server_name apache.lan;
      return 301 https://$server_name$request_uri;
    }
  
    server {
      listen 443 ssl;
      listen [::]:443 default_server ipv6only=on;
      server_name apache.lan;
  
      ssl_certificate       /etc/nginx/ssl/certificate.crt;
      ssl_certificate_key   /etc/nginx/ssl/certificate.key;
  
      location / {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
  
        proxy_pass http://apache:5000;
        proxy_read_timeout  90;
      }
      }
    }
  

  After up this docker, rproxy_proxy "nginx -g 'daemon ..." 13 minutes ago Restarting (1) 5 minutes ago Keeps restarting, and ofcourse my https not work. Someone can help? how can I enable my website in docker with https?
• Apache 2.4 reverse proxy http to https not resend cookie

  after many hours spent to test i can not work with my vhost local in proxy to https backend.

  I work from http://myhost-webapp.localhost -> https://10.0.0.99:9443

  LOCAL VHOST

      Define myhost myhost-webapp
      Define hostextension localhost
      Define DocumentRoot ${xampproot}/htdocs/myhost/webapp
  
      Define remotehost 10.0.0.99
      Define remoteport 9443
      <VirtualHost *:80>
          ServerAdmin ${myhost}@${hostextension}
          ServerName  ${myhost}.${hostextension}
          ServerAlias www.${myhost}.${hostextension} 
  
          DocumentRoot ${DocumentRoot}
          DirectoryIndex index.localhost.html index.php index.html index.htm
  
          SSLProxyEngine On
          SSLProxyVerify none 
          SSLProxyCheckPeerCN off
          SSLProxyCheckPeerName off
          SSLProxyCheckPeerExpire off
          #SSLCertificateFile      "conf/apache-selfsigned.crt"
          #SSLCertificateKeyFile "conf/apache-selfsigned.key"     
          RequestHeader set X-Forwarded-Proto "https"         
          Header add "Access-Control-Allow-Origin" "*"            
  
          ProxyPassReverseCookiePath / /
          ProxyPassReverseCookieDomain ${myhost}@${hostextension} ${remotehost}
          ProxyPass /rest/security https://${remotehost}:${remoteport}/rest/security
          ProxyPassReverse /rest/security https://${remotehost}:${remoteport}/rest/security
          ProxyPassMatch ^/rest/security(|[a-zA-Z0-9\-]+) https://${remotehost}:${remoteport}/rest/security/$1
  
  
  
          <Directory />
          Options FollowSymLinks
          AllowOverride All
          Order allow,deny
          Allow from all      
          Require all granted         
          </Directory>
  
          ErrorLog  ${xampproot}/logs/${myhost}.${hostextension}.error.log
          CustomLog ${xampproot}/logs/${myhost}.${hostextension}.access.log combined
              </VirtualHost>  
  

  the first call work fine because not work with cookie, but after login all next calls must have the cookie in request. The call to auth work fine and i recive the cookie in header response

  HEADER LOGIN RESPONSE

  HTTP/1.1 200 OK
  Date: Wed, 12 Dec 2018 14:32:09 GMT
  Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n PHP/7.2.11
  Content-Type: text/html; charset=UTF-8
  Set-Cookie: a3u="AA8XiiVW3VSLw99k05LfcGjpKebdkuJba4532mb0N+MS8+xTD2+uHfhkNT+AYkemIb4CRXTNXedtLa6yXZwXWbc="; Path=/; Secure; HTTPOnly
  Set-Cookie: a3pt="AMSQr9vTZhe38+XCCEIOfVmIoq3b22DAEOC8jvhDZtoTKNUfWNotT6GpbSRb1Ido5W7eK/51eFD2A3/+rAlt7mHpKH0SuNQ1BR2PmvlVpECl"; Path=/; Secure; HTTPOnly
  Access-Control-Allow-Origin: *
  Keep-Alive: timeout=5, max=59
  Connection: Keep-Alive
  Transfer-Encoding: chunked
  

  after login with success begin another call, but this fail because in my header request not have any cookie

  REQUEST HEADER WRONG

  GET /rest/security/app-variables?_dc=1544625129496 HTTP/1.1
  Host: myhost-webapp.localhost
  Connection: keep-alive
  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36
  X-Requested-With: XMLHttpRequest
  Accept: */*
  Referer: http://myhost-webapp.localhost/
  Accept-Encoding: gzip, deflate, br
  Accept-Language: it,en;q=0.9,en-US;q=0.8
  

  In my vhost local https all work fine and this is a correct request header (with https://myhost-webapp.ssl.localhost

  REQUEST FROM HTTPS LOCAL VHOST

  GET /rest/security/app-variables?_dc=1544622599978 HTTP/1.1
  Host: myhost-webapp.ssl.localhost
  Connection: keep-alive
  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36
  X-Requested-With: XMLHttpRequest
  Accept: */*
  Referer: https://myhost-webapp.ssl.localhost/
  Accept-Encoding: gzip, deflate, br
  Accept-Language: it,en;q=0.9,en-US;q=0.8
  Cookie: JSESSIONID=sI01GSWEaSbhGD8mqUoY3w9b; a3u="AI4p0hyymcJPxd2Y13wtfsPpKebdkuJba4532mb0N+MS8+xTD2+uHfhkNT+AYkemISLeE/1iAS4UourleWCBNdQ="; a3pt="AC3FByfeyEpG60gWuA+vrtJKF16AS+FPtSRYeRh+AMl/XsBu6ODVQicgYWieM0jqOCLwC+8OKir+0alkmtYeVuQhuJSYnjUp2cVBC+EyCdqz"
  

  why in my http host not append any cookies? in my cookie storage not have any saved information. someone can help me to resolve this configuration?

  i must use http because https vhost not work in firefox and IE and i must test in IE my applicatin web :(
• Jetty certificate authentication only

  I have an EDI server that uses Jetty as the HTML connector for AS2. In the current configuration, Jetty is listening on port 443 and uses password and certificate authentication.

  I have a vendor that does not support password authentication, so I have added added another port for Jetty to listen to, however I am not sure how to configure Jetty for certificate authentication only on a different port.

  Am I looking to use a keystore? Java-client-certificate-authentication
• Content disposition is null after applying SSL certificate, why?

  We have implemented some download functionality. We are setting content disposition on the api side. By doing this our UI will get the file name from content disposition.

  This was working fine until we added a SSL certificate and moved the site to domain specific link.

  Now the content disposition is coming back null and the file is getting downloaded with null as the name and no extension.

  Below is our code to download the file.

  public IActionResult DownloadFile(int ID)
  {
      try
      {
          if (ValidateUsrToken())
          {
              using (ExcelPackage package = BAL.DownloadFile(ID))
              {
                  string fileName = Uri.EscapeDataString(package.File.Name);
  
                  System.Net.Mime.ContentDisposition cd = new System.Net.Mime.ContentDisposition
                  {
                      FileName = fileName,
                  };
  
                  Response.Headers.Add("Content-Disposition", cd.ToString());
  
                  return File(package.GetAsByteArray(), "application /vndopenxmlformats-officedocument.spreadsheetml.sheet");
              }
          }
          else throw new NullReferenceException();
      }
      catch (Exception ex)
      {
          throw ex;
      }
  }
  

  UI Code

  const disposition = res.headers.get('content-disposition') || '';
  if (disposition && disposition.indexOf('attachment') !== -1) {
     const filenameRegex = /filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/;
     const matches = filenameRegex.exec(disposition);
     if (matches != null && matches[1]) {
        filename = matches[1].replace(/['"]/g, '');
        filename = decodeURIComponent(filename);
     }
  } 
  

  Our api & UI is implemented on azure cloud.

  Any help on this appreciated.
• Convert HTTP to HTTPS for my public ip address

  I'm very new to this. Can anyone please suggest me whether it is possible or not? If so, please let me know the way
• URL Rewrite in wodpress

  I am trying to rewrite URL in multi-language WordPress web site.

  Problem is in homepage URL. When web site is in english, everything is ok, but whet I switch to Slovakian, I get this URL for homepage: www.example.com/sk/home/

  but I want it to be: www.example.com/sk/

  I tried adding this in .htacess, and it didnt work

  RewriteEngine On
  RewriteRule ^sk?$ sk/home
  

  Based on https://developer.wordpress.org/reference/functions/add_rewrite_rule/ I tried adding in functions.php, but also didn't work

  function rewrite_sk() {
      add_rewrite_rule('^sk', 'sk/home', 'top');
  }
  add_action('init', 'rewrite_sk');
  

  Anybody knows where I am making mistake? Because I can't figure it out.
• Redirection issue in htaccess

  I have one issue with my htaccess redirection code.

  Suppose I request this url

  https://example.com/about-us/

  Then its redirect to non-slash link that means they redirect to

  https://example.com/about-us

  but what happens in between

  https://example.com/about-us/ this url redirect to
  https://example.com/about-us.html then redirect to
  https://example.com/about-us
  

  I want to remove this middle step from redirection.

  I attached my htaccess code for better understanding

  # BEGIN WordPress
  <IfModule mod_rewrite.c>
  RewriteEngine On
  
  RewriteCond %{HTTPS} !=on
  # This checks to make sure the connection is not already HTTPS
  RewriteCond %{HTTP_USER_AGENT} !Twitterbot [NC]
  RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
  
  RewriteCond %{HTTP_HOST} ^www.example.com$ [NC] 
  #RewriteCond %{HTTP_USER_AGENT} !Twitterbot [NC]
  RewriteRule ^(.*)$ https://example.com/$1 [R=301,L]
  
  RewriteBase /
  RewriteCond %{REQUEST_FILENAME} "blog"
  RewriteRule ^index\.php$ - [L]
  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteCond %{REQUEST_FILENAME} "blog"
  RewriteRule . /index.php [L]
  
  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  #RewriteCond %{REQUEST_FILENAME}\.html -f
  
  
  # remove the .html extension
  RewriteCond %{THE_REQUEST} ^GET\ (.*)\.html\ HTTP
  RewriteRule (.*)\.html$ $1 [R=301]
  
  # remove trailing slash if not a directory
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteCond %{REQUEST_URI} /$
  RewriteRule (.*)/ $1 [R=301]
  
  
  # forward request to html file, **but don't redirect (bot friendly)**
  RewriteCond %{REQUEST_FILENAME}.html -f
  RewriteCond %{REQUEST_URI} !/$
  RewriteRule (.*) $1\.html [L]
  
  </IfModule>
  
  #Alternate default index page
  DirectoryIndex index.html
  
  ## 404 Page
  ErrorDocument 404 https://example.com/404
  
  ## EXPIRES CACHING ##
  <IfModule mod_expires.c>
  ExpiresActive On
  ExpiresByType image/jpg "access plus 1 year"
  ExpiresByType image/jpeg "access plus 1 year"
  ExpiresByType image/gif "access plus 1 year"
  ExpiresByType image/png "access plus 1 year"
  ExpiresByType text/css "access plus 1 month"
  ExpiresByType application/pdf "access plus 1 month"
  ExpiresByType text/x-javascript "access plus 1 month"
  ExpiresByType application/x-shockwave-flash "access plus 1 month"
  ExpiresByType image/x-icon "access plus 1 year"
  #ExpiresDefault "access plus 2 days"
  </IfModule>
  ## EXPIRES CACHING ##
  
  # END WordPress
  

  Thank you in advance