Forum

Require SSL from public IPs, allow unencrypted from LAN

Marius

11 July 2015, 15:09

Hi,

Is there a way to allow unencrypted access to a directory from local (LAN) IPs, but force using encryption for public IPs?
The directory is password protected and I may send the password in clear text by mistake if I forget the "s" in "https". I can't always use encryption because my smart TV has a problem with my SSL certificate (home-made CA not recognised as valid).

Thank you!

Hugo Leisink

11 July 2015, 17:51

I know a solution, but that one requires that you know the User-Agent header sent by your TV.

UrlToolkit {
  ToolkitID = selectively_enforce_https
  Header User-Agent Your-TV Return
  UseSSL Return
  Match ^/(your_directory/.*) Redirect https://your_hostname/$1
}

Marius

11 July 2015, 19:59

Will try. Thanks.

This topic has been closed.

Back