How to use SSL for some pages and not for others?

Posted by solid on Server Fault See other posts from Server Fault or by solid
Published on 2010-03-24T16:25:34Z Indexed on 2010/03/24 16:33 UTC
Read the original article Hit count: 238

Filed under:

ssl

We are building an application where we want anything the following to be SSL:

secure.ourapp.com -> all pages must be SSL (can this be done with a Vhost in apache?)

www.ourapp.com/signup -> SSL www.ourapp.com/login -> SSL www.ourapp.com/information -> NOT SSL

So my question is: can you put SSL on some pages and not on others? Or does it only work on a per-subdomain basis?

thanks a lot for helping me out

Related posts about ssl

Plesk SSL Certificate (Default cert when SSL enabled, CORRECT cert when SSL is disabled)

as seen on Server Fault - Search for 'Server Fault'
I'm running Plesk 8.6.0: I have an SSL cert installed through Plesk's admin interface. But I have a bit of an issue: When I enabled SSL for the site, and selected my cert, then restart httpd, Plesk defaults to using my self-signed default certificate. Conversely, when I disable SSL support for the… >>> More
apache renew ssl not working [on hold]

as seen on Server Fault - Search for 'Server Fault'
Downloaded a new ssl cert from go daddy and installed the cert on apache2 server put the cert in /etc/ssl/certs/ folder put the gd_bundle.crt in the /etc/ssl/ folder private key is in /etc/ssl/private/private.key I just replaced the original files with the new files, did not replace the private… >>> More
Cant connect to mysql using self signed SSL certificate

as seen on Server Fault - Search for 'Server Fault'
After creating a self-signed SSL certificate, I have configured my remote mysqld to use them (and ssl is enabled) I ssh into my remote server, and try connecting to its own mysqld using ssl (mysql server is 5.5.25).. ~> mysql -u <user> -p --ssl=1 --ssl-cert=client.cert --ssl-key=client… >>> More
How to log invalid client SSL certificate in SSL

as seen on Server Fault - Search for 'Server Fault'
I have a IIS web site which requires client certificate. I have turned off CRL checking. The client is unable to access the web site - he gets 403.17 (certificate expired) error. I would like to log the certificate he is using, becaue I think he is using the wrong certificate. Is there a way to… >>> More
Mixing SSL and non-SSL content in an Apache2 virtual host

as seen on Server Fault - Search for 'Server Fault'
I have a (hopefully) common scenario for one of my sites that I just can't seem to figure out how to deploy correctly. I have the following site and directories for example.com: These need to require SSL: /var/www/example.com/admin /var/www/example.com/order These need to be non-SSL: /var/www/example… >>> More

Developer IT

How to use SSL for some pages and not for others? - Developer IT

How to use SSL for some pages and not for others?

ssl

Related posts about ssl

Plesk SSL Certificate (Default cert when SSL enabled, CORRECT cert when SSL is disabled)

apache renew ssl not working [on hold]

Cant connect to mysql using self signed SSL certificate

How to log invalid client SSL certificate in SSL

Mixing SSL and non-SSL content in an Apache2 virtual host

Categories cloud