.htaccess Anweißung für SSL Domain - Problem bei https:// Auflösung ohne www.

Hallo zusammen,

wir setzen in einem Projekt ein SSL Zertifikat für ein Contao System ein. Soweit läuft auch alles super. Wir haben das entsprechend in der Seitenstruktur eingestellt und die .htaccess angepasst. Jedoch ist das ein kleiner Schönheitsfehler drin den ich nicht gelöst bekomme.

Erschwert wird das Ganze durch andere Projekte im selben System die ohne SSL laufen. Das klappt aber alles.

Folgende Anweißung ist drin:

Code:

---

RewriteCond %{HTTP_HOST} ^entsprechende-website\.com$ [NC]
  RewriteRule ^(.*)$ https://www.entsprechende-website.com/$1 [R=301,L]
 
  RewriteCond %{HTTP_HOST} !^$
  RewriteCond %{HTTP_HOST} ^www\.entsprechende-website\.com$
  RewriteCond %{HTTP_HOST} !^(www\.)?anderes-projekt-ohne-ssl\.com
  RewriteCond %{SERVER_PORT} !^443$
  RewriteRule ^ https://www.entsprechende-website.com%{REQUEST_URI} [L,R=301]

---

Und zwar funktioniert alles, bis daruf wenn man folgenden Aufruf macht:

Code:

---

https://entsprechende-website.com

---

Dann bekomme ich die URL auch so aufgeschlüsselt. Dabei steht doch in der ersten Anweißung, dass ohne www. auf mit www. umgeletet werden soll. Wo liegt der Fehler, hat jemand eine Ahnung?

Danke und viele Grüße
Jens

Ich glaube, beim Aufruf der URL https und kein www sprichst Du bereits mit dem Server und bekommst ein Zertifikatsproblem bevor die Regeln in der .htaccess greifen können.

Gibt es denn eine Möglichkeit, dass zu umgehen.
Muss man in der Domain Administration schon was umstellen? Also den Aufruf ohne www. schon als Umleitung einstellen? Das geht ja bei einigen Hostern.

Poste mal die gesamte .htaccess.

Sehr gerne ;-)

Code:

---

##
# Contao Open Source CMS
#
# Copyright (c) 2005-2014 Leo Feyer
#
# @package Core
# @link    https://contao.org
# @license http://www.gnu.org/licenses/lgpl-3.0.html LGPL
##

##
# Prevent access to the Contao template files
##
<FilesMatch "\.(tpl|html5|xhtml)$">
  <IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
  </IfModule>
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
</FilesMatch>

##
# Allow access from all domains for webfonts
# @see https://github.com/h5bp/html5-boilerplate
##
<IfModule mod_headers.c>
  <FilesMatch "\.(ttf|ttc|otf|eot|woff|font\.css)$">
    Header set Access-Control-Allow-Origin "*"
  </FilesMatch>
</IfModule>

##
# Disable ETags
# @see http://developer.yahoo.com/performance/rules.html#etags
##
FileETag None
<IfModule mod_headers.c>
  Header unset ETag
</IfModule>

##
# Set the proper MIME types
# @see https://github.com/h5bp/html5-boilerplate
##
<IfModule mod_mime.c>
  AddType application/javascript              js jsonp
  AddType application/json                    json
  AddType audio/ogg                          oga ogg
  AddType audio/mp4                          m4a f4a f4b
  AddType video/ogg                          ogv
  AddType video/mp4                          mp4 m4v f4v f4p
  AddType video/webm                          webm
  AddType video/x-flv                        flv
  AddType image/svg+xml                      svg svgz
  AddEncoding gzip                            svgz
  AddType application/vnd.ms-fontobject      eot
  AddType application/x-font-ttf              ttf ttc
  AddType font/opentype                      otf
  AddType application/x-font-woff            woff
  AddType image/x-icon                        ico
  AddType image/webp                          webp
  AddType text/cache-manifest                appcache manifest
  AddType text/x-component                    htc
  AddType application/xml                    rss atom xml rdf
  AddType application/x-web-app-manifest+json webapp
  AddType text/x-vcard                        vcf
  AddType application/x-shockwave-flash      swf
</IfModule>

##
# Gzip compression
# @see https://github.com/h5bp/html5-boilerplate
##
<IfModule mod_deflate.c>
  <IfModule mod_filter.c>
    AddOutputFilterByType DEFLATE text/html text/plain text/css application/json
    AddOutputFilterByType DEFLATE application/javascript
    AddOutputFilterByType DEFLATE text/xml application/xml text/x-component
    AddOutputFilterByType DEFLATE application/xhtml+xml application/rss+xml application/atom+xml
    AddOutputFilterByType DEFLATE image/x-icon image/svg+xml application/vnd.ms-fontobject application/x-font-ttf font/opentype
  </IfModule>
</IfModule>

##
# Expires headers (for better cache control)
# @see https://github.com/h5bp/html5-boilerplate
##
<IfModule mod_expires.c>
  ExpiresActive on

  ##
  # Productional website
  ##
  ExpiresByType text/cache-manifest          "access plus 0 seconds"
  ExpiresByType text/html                    "access plus 0 seconds"
  ExpiresByType text/xml                      "access plus 0 seconds"
  ExpiresByType application/xml              "access plus 0 seconds"
  ExpiresByType application/json              "access plus 0 seconds"
  ExpiresByType application/rss+xml          "access plus 1 hour"
  ExpiresByType application/atom+xml          "access plus 1 hour"
  ExpiresByType image/gif                    "access plus 1 month"
  ExpiresByType image/png                    "access plus 1 month"
  ExpiresByType image/jpeg                    "access plus 1 month"
  ExpiresByType image/x-icon                  "access plus 1 month"
  ExpiresByType video/ogg                    "access plus 1 month"
  ExpiresByType audio/ogg                    "access plus 1 month"
  ExpiresByType video/mp4                    "access plus 1 month"
  ExpiresByType video/webm                    "access plus 1 month"
  ExpiresByType text/x-component              "access plus 1 month"
  ExpiresByType application/x-font-ttf        "access plus 1 month"
  ExpiresByType font/opentype                "access plus 1 month"
  ExpiresByType application/x-font-woff      "access plus 1 month"
  ExpiresByType image/svg+xml                "access plus 1 month"
  ExpiresByType application/vnd.ms-fontobject "access plus 1 month"
  ExpiresByType text/css                      "access plus 1 year"
  ExpiresByType application/javascript        "access plus 1 year"

  ##
  # Disable caching during development
  # @see https://github.com/contao/core/issues/4364
  ##
  #ExpiresByType text/cache-manifest          "access"
  #ExpiresByType text/html                    "access"
  #ExpiresByType text/xml                      "access"
  #ExpiresByType application/xml              "access"
  #ExpiresByType application/json              "access"
  #ExpiresByType application/rss+xml          "access"
  #ExpiresByType application/atom+xml          "access"
  #ExpiresByType image/gif                    "access"
  #ExpiresByType image/png                    "access"
  #ExpiresByType image/jpeg                    "access"
  #ExpiresByType image/x-icon                  "access"
  #ExpiresByType video/ogg                    "access"
  #ExpiresByType audio/ogg                    "access"
  #ExpiresByType video/mp4                    "access"
  #ExpiresByType video/webm                    "access"
  #ExpiresByType text/x-component              "access"
  #ExpiresByType application/x-font-ttf        "access"
  #ExpiresByType font/opentype                "access"
  #ExpiresByType application/x-font-woff      "access"
  #ExpiresByType image/svg+xml                "access"
  #ExpiresByType application/vnd.ms-fontobject "access"
  #ExpiresByType text/css                      "access"
  #ExpiresByType application/javascript        "access"

</IfModule>

##
# Header adjustments
##
<IfModule mod_headers.c>

  ##
  # Disable caching during development
  # @see https://github.com/contao/core/issues/4364
  ##
  #Header unset Cache-Control
  #Header append Cache-Control must-revalidate

  ##
  # Do not cache the cron.txt file
  # @see https://github.com/contao/core/issues/5105
  ##
  <FilesMatch "cron\.txt$">
    Header set Cache-Control "no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, no-transform"
  </FilesMatch>

  ##
  # Add a Vary Accept-Encoding header for the compressed resources. If you
  # modify the file types above, make sure to change them here accordingly.
  # @see http://developer.yahoo.com/performance/rules.html#gzip
  #
  # Note: If you are using a case-sensitive file system like HFS+ or ext4, you
  # have to change the <FilesMatch> directive as follows:
  #
  # <FilesMatch "\.(?i:js|css|xml|gz|svgz)$">
  #
  # For more information see: https://github.com/contao/core/issues/4364
  ##
  <FilesMatch "\.(js|css|xml|gz|svgz)$">
    Header append Vary Accept-Encoding
  </FilesMatch>

</IfModule>

SetEnvIfNoCase User-Agent "DirBuster_Project" bad_user

##
# Disable MultiViews if you are having issues with requests returning the wrong
# page. Requires AllowOverride Options=All,MultiViews to be set here.
# @see https://github.com/contao/core/issues/3521
##
#Options -MultiViews

##
# URL rewriting
##
<IfModule mod_rewrite.c>
  RewriteEngine On

  ##
  # Change the RewriteBase if your Contao installation is in a subdirectoy and
  # the rewrite rules are not working properly. Usage examples:
  #
  #  RewriteBase /contao-3.0.0
  #  RewriteBase /path/to/contao
  #
  # Depending on your server, you might have to remove the line entirely.
  ##
  RewriteBase /

  ##
  # Uncomment the following lines to add "www." to the domain:
  #
 

       
  #
  # Uncomment the following lines to remove "www." from the domain:
  #
  #  RewriteCond %{HTTP_HOST} ^www\.example\.com$ [NC]
  #  RewriteRule (.*) http://example.com/$1 [R=301,L]
  #
 
  RewriteCond %{HTTP_HOST} ^entsprechende-website\.com$ [NC]
  RewriteRule ^(.*)$ https://www.entsprechende-website.com/$1 [R=301,L]
 
  RewriteCond %{HTTP_HOST} ^anderes-projekt-ohne-ssl\.com$ [NC]
  RewriteRule ^(.*)$ http://www.anderes-projekt-ohne-ssl.com/$1 [R=301,L]
 
  RewriteCond %{HTTP_HOST} !^$
  RewriteCond %{HTTP_HOST} ^www\.entsprechende-website\.com$
  RewriteCond %{HTTP_HOST} !^(www\.)?anderes-projekt-ohne-ssl\.com
  RewriteCond %{SERVER_PORT} !^443$
  RewriteRule ^ https://www.entsprechende-website.com%{REQUEST_URI} [L,R=301]
 
  Redirect 301 /en/unterseitexy.php https://www.entsprechende-website.com/xy.html
  Redirect 301 /de/unterseitexy.php https://www.entsprechende-website.com/xy.html
     
 
  # Make sure to replace "example.com" with your domain name.
  ##

  ##
  # If you cannot use mod_deflate, uncomment the following lines to load a
  # compressed .gz version of the aggregated Contao JavaScript and CSS files.
  ##
  #AddEncoding gzip .gz
  #<FilesMatch "\.js\.gz$">
  #  AddType "application/javascript" .gz
  #</FilesMatch>
  #<FilesMatch "\.css\.gz$">
  #  AddType "text/css" .gz
  #</FilesMatch>
  #RewriteCond %{HTTP:Accept-encoding} gzip
  #RewriteCond %{REQUEST_FILENAME} \.(js|css)$
  #RewriteCond %{REQUEST_FILENAME}.gz -f
  #RewriteRule ^(.*)$ $1.gz [QSA,L]

  ##
  # Do not rewrite requests for static files or folders such as style sheets,
  # images, movies or text documents. Do not add the URL suffix here!
  #
  # Note: If you are using a case-sensitive file system like HFS+ or ext4, you
  # have to change the <FilesMatch> directive as follows:
  #
  # <FilesMatch "\.(?i:htm|php|js|css|…|gz)$">
  #
  # Note: The directive will disable mod_rewrite entirely for the configured
  # file types, so if you want to apply custom rules such as domain redirects,
  # make sure to comment the lines (see #6588).
  #
  # For more information see: https://github.com/contao/core/issues/4364
  ##
  <FilesMatch "\.(htm|php|js|css|htc|png|gif|jpe?g|ico|xml|csv|txt|swf|flv|mp4|webm|ogv|mp3|ogg|oga|eot|woff|svg|svgz|ttf|pdf|gz)$">
    RewriteEngine Off
  </FilesMatch>

  ##
  # By default, Contao adds ".html" to the generated URLs to simulate static
  # HTML documents. If you change the URL suffix in the back end settings, make
  # sure to change it here accordingly!
  #
  #  RewriteRule .*\.html$ index.php [L]  # URL suffix .html
  #  RewriteRule .*\.txt$ index.php [L]    # URL suffix .txt
  #  RewriteRule .*\.json$ index.php [L]  # URL suffix .json
  #
  # If you do not want to use an URL suffix at all, you have to add a second
  # line to prevent URLs that point to folders from being rewritten (see #4031).
  #
  #  RewriteCond %{REQUEST_FILENAME} !-d
  #  RewriteRule .* index.php [L]
  #
  # If you are using mod_cache, it is recommended to use the RewriteRule below,
  # which adds the query string to the internal URL:
  #
  #  RewriteRule (.*\.html)$ index.php/$1 [L]
  #
  # Note that not all environments support mod_rewrite and mod_cache.
  ##
  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteRule .*\.html$ index.php [L]

  ##
  # The following rules are required if you want to pass the language as first
  # URL parameter (added in Contao 2.11). The first rule rewrites the empty URL
  # to the front end controller, the second one adds a missing trailing slash.
  ##
  RewriteRule ^[a-z]{2}(\-[A-Z]{2})?/$ index.php [L]
  RewriteRule ^([a-z]{2}(\-[A-Z]{2})?)$ $1/ [R=301,L]

</IfModule>

Deny from env=bad_user

ErrorDocument 404 /seite-nicht-g

---

Das einzige was mir auffällt ist, dass deine .htaccess nicht mehr die neuesten Änderungen der aktuellen Contao Version hat (außer du verwendest gar nicht die aktuellste Contao Version). Das hat aber auf das Problem keine Auswirkung. Eigentlich sollte http(s)://entsprechende-website.com auf https://www.entsprechende-website.com umgeleitet werden.

Hey Spooky,

es ist eine 3.2er Version.
Das 3.5er Update steht bevor, mal schauen ob sich was ändert. Denke aber auch das es daran nicht liegt. Irgendwas stimmt wohl mit der Anweißung nicht.
Ok, es ist aber auch höchst unwahrscheinlich das jemand direkt die Adresse mit https:// davor in den Browser eingibt, oder?

Danke und viele Grüße