Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

URL Masking...

Status
Not open for further replies.

Johnb175

Technical User
Mar 26, 2004
22
US
I have been fighting with this for quite some time now. How can I hide the port in the browsers address bar? I do not want people seeing I would like for it to show as I have been unable to figure this out with mod_rewrite. Any help would be greatly appreciated.
 
Are you sure this is possible? The only way for a browser to go to a non-standard HTTP port is by explicitly stating the port in the URL.



Want the best answers? Ask the best questions!

TANSTAAFL!!
 
well i should clarify... the main site is running on port 80 but for certain links I send it to a secure site running on port 81. I do not want that seen in the browser window.
 
Are you redirecting the connection? That's largely the equivalent of typing to the URL, which must include the port number as it's non-standard for HTTPS.



Want the best answers? Ask the best questions!

TANSTAAFL!!
 
I have tried using ProxyPass and ProxyPass reverse but I am not sure I am understanding the directions clearly. Can someone give me an example of what this would look like in my httpd.conf to accomplish what I am trying to do?
 
Try a frame. The url will never change in the address bar.
 
Actually your kind of stuck, you simply can not mask https over http. Its kind of a wacky thing to do.

Why not run https over its natural port of port 443?

ProxyPass tells apache to fetch the page FOR you which in this case would make the apache connect to the server secure but the user connection to apache insecure(since ssl would terminate at the reverse proxy).

Your not going to be able to do what you are trying to do, your mixing protocols.
 
Yah iframe would work although you make get some wacky 'security error' things if you go in the wrong direction. Test this solution in multiple browsers..
 
I cannot run the site on port 443 b/c I already have another secure site bound to that port. Since I only have one ip I have to use name based virtual hosting.
 
Welcome to the wonderful world of ssl.

Your stuck unless you get another IP or settle for the wacky location bar or use an IFRAME.
 
Ok well i created a new index.htm on the default (port 80) website. In that I put the following:
<frameset rows="*" border="0" framespacing="0" frameborder="NO">
<frame src="</frameset>

It of course does hide the real address in the address bar, however it prompts for me to accept the certificate on every image loaded on that webpage. So I have to accept the cert like 14 times. Any ideas?
 
That is what I was referring to when I said

Code:
...although you make get some wacky 'security error' things if you go in the wrong direction. Test this solution in multiple browsers..

The only solution is to lower the security settings in IE.
 
From the above statements, can I conclude that you can only bind one and only one secure site to an IP address?

Is the IP address then contained on the certificate?
 
Correct, you can only bind one name to an ssl ip.

This is due to the fact that SSL is negotiated before the domain name is transferred. It thus binds to the first name it finds with apache.

There are ways around this but they always involve hardware like an SSL accelerator, an F5 proxy box, Alteon stuff etc etc.

 
If I wanted to host multiple sites on the same server, all using port 443 for SSL/TLS, then would it be easy to set up if you had a different IP for each site?

Would it be as simple as changing the IPs listed on the DNS server that contained the authorative details for that site, so that the SSL connections were all coming in on port 443, but on different IPs, or would I need multiple installations of Apache running simultaneously to negotiate all the secure connections?

Thanks.
 
Correct, apache can handle multiple SSL connections but each connection requires its own IP if you want it to display properly.

Let me qualify this, if you don't care about security errors you can switch any vhost on a server into SSL but it will take the SSL cert of the FIRST vhost on THAT IP address.

This leads to a mismatch in hostname/certificate hostname. Giving each ssl hostname its own IP removes the problem.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top