: With several sites on the same server and different rules for HTTP/HTTPS a non-secure site is getting redirected to a different secure one I have an Apache server that will be serving up a

@BetL925

The Apache documentation for name based virtual hosts states (emphasis is theirs):


The default name-based vhost for an IP and port combination

If no matching ServerName or ServerAlias is found in the set of virtual hosts containing the most specific matching IP address and port combination, then the first listed virtual host that matches that will be used.


Because you don't have a virtual host defined for siteB:443 it is defaulting to siteA:443 because it is the first one matching the IP address and port number.

There are two ways to solve this:


Create a virtual host for siteB:443
Create virtual hosts to handle unknown host names. Have them return error codes. Have them come first in the list by naming the config files like 0000-default-site.conf and 0000-default-site-ssl.conf


I'd recommend the default site solution, otherwise SiteA will be served up for any random host name that is pointed to the server.

Vote Up Vote Down