Forum: Ruby on Rails shared ssl cert and url rewritting

Announcement (2017-05-07): is now read-only since I unfortunately do not have the time to support and maintain the forum any more. Please see and for other Rails- und Ruby-related community platforms.
kyle (Guest)
on 2007-07-14 11:30
(Received via mailing list)

My client does not want to purchase a ssl cert, rather they want to
use their host's ( shared ssl cert.  To access the site
through shared ssl under their setup you have to use the url:

As you can see, these makes havoc rain down on the url.

But, I googled around and came up with a good solution I thought, that
is something similar to a subdomain redirect:
(my code is below)

I modified the above code to give me a nice url when I need ssl.  And
it works, except it goes into an endless redirection loop.

I think the problem is that not only is the domain changing, but also
the base of the url which must really screw rails up.

So, is there a way to do something like this or do I just need to lay
down the law with the client and buy an ssl cert?

Thank You,

code from application.rb

#rewrite the url to redirect to the westhost ssl server when needed
#see config/environment.rb to set which controllers need ssl
def url_for(options = {}, *parameters_for_method_reference)
      tmp_result = super((options.is_a?(Hash) ?
options.merge({:only_path => false}) : options),
      if not (tmp_result =~
         url_to_go = dispatch_ssl(tmp_result)

      super((url_to_go.nil? ? tmp_result : url_to_go),

NOTE: SECURE_DOMAIN is set in environment.rb to be:

#called by url_for, thus makes the proper ssl domain
def dispatch_ssl(tmp_result = request.request_uri)
      domain = SECURE_DOMAIN.blank? ? "" : SECURE_DOMAIN + "."
      # need secure is a function that simply check if this path need
to be put under SSL
      if need_secure?(tmp_result)
        if request.protocol == 'http://'
          url_to_go = "https://#{domain}" + tmp_result
        if request.protocol == 'https://'
          host =,"")
          url_to_go = 'http://' + host + tmp_result
      return url_to_go

  #used by dispatch_ssl, checks the config/environments.rb set
  #to see if the uri really does need ssl or not
  def need_secure?(uri)
      SECURE_MODE.each{ |s|
        a = (uri =~ s)
        return true unless a.nil?
      return false;

  #we put this magic into a before_filter of a controller
  #which will check if they need ssl and aren't using it
  #and then send them marily on their way to ssl bliss.
  #we hope!
  def ssl_required
      if not (redir = dispatch_ssl.to_s).blank?
        redirect_to(redir) and return false
This topic is locked and can not be replied to.