# Redirect https:// to https://www produce untrusted connection

**URL:** <https://www.ruby-forum.com/t/redirect-https-to-https-www-produce-untrusted-connection/188301>\
**Category:** NGINX\
**Created:** [May 9, 2010, 10:36pm UTC](https://www.ruby-forum.com/t/redirect-https-to-https-www-produce-untrusted-connection/188301 "2010-05-09T22:36:13Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![pablo\_platt](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/d6d6ee/32.png) [@pablo\_platt](https://www.ruby-forum.com/u/pablo_platt)\
**Post date:** [May 9, 2010, 10:36pm UTC](https://www.ruby-forum.com/t/redirect-https-to-https-www-produce-untrusted-connection/188301/1 "2010-05-09T22:36:13Z")

</div>

Hi,

I’m running a website with nginx as a proxy and for static files.  
I’m using the ubuntu lucid nginx package - version 0.7.65  
[http://example.com](http://example.com) redirect to [http://www.example.com](http://www.example.com) - works  
[https://www.example.com](https://www.example.com) - SSL works  
[https://example.com](https://example.com) redirect to [https://www.example.com](https://www.example.com) - doesn’t work  
and  
show untrusted connection in the browser.

I have two questions:

- Why SSL only works when I use default on the listen: “listen 443  
default;”
- Why I can’t redirect https:// to [https://www](https://www) before I’m getting the  
untrusted connection warning.

Thanks

My config file:  
server {  
listen 80;  
server\_name [example.com.com](http://example.com.com);  
rewrite ^/(.\*) [http://www.example.com/$1](http://www.example.com/$1) permanent;  
}

server {  
listen 80;  
server\_name [www.example.com](http://www.example.com);

```
location / {
    proxy_pass http://127.0.0.1:8000;
}

...

```

}

server {  
listen 443;  
server\_name [example.com.com](http://example.com.com);  
rewrite ^/(.\*) [https://www.example.com.com/$1](https://www.example.com.com/$1) permanent;  
}

server {  
listen 443 default;

```
ssl on;
ssl_certificate /etc/nginx/ssl/example.pem;
ssl_certificate_key /etc/nginx/ssl/example.key;

server_name www.example.com;

location / {
    proxy_pass http://127.0.0.1:8000;
}
...

```

}

---

<div class="post-metadata">

**Author:** ![pablo\_platt](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/d6d6ee/32.png) [@pablo\_platt](https://www.ruby-forum.com/u/pablo_platt)\
**Post date:** [May 10, 2010, 9:38am UTC](https://www.ruby-forum.com/t/redirect-https-to-https-www-produce-untrusted-connection/188301/2 "2010-05-10T09:38:09Z")

</div>

On Sun, May 09, 2010 at 11:35:23PM +0300, pablo platt wrote:

> - Why SSL only works when I use default on the listen: “listen 443  
> default;”

Please read this:

> **[Configuring HTTPS servers](http://nginx.org/en/docs/http/configuring_https_servers.html#single_http_https_server)**
>
> To configure an HTTPS server, the ssl parameter must be enabled on listening sockets in the server block, and the locations of the server certificate and private key files should be specified:

> **[Configuring HTTPS servers](http://nginx.org/en/docs/http/configuring_https_servers.html)**

> - Why I can’t redirect https:// to [https://www](https://www) before I’m getting the  
> untrusted connection warning.

> **[Configuring HTTPS servers](http://nginx.org/en/docs/http/configuring_https_servers.html#certificate_with_several_names)**
>
> To configure an HTTPS server, the ssl parameter must be enabled on listening sockets in the server block, and the locations of the server certificate and private key files should be specified:

–  
Igor S.

> **[Igor Sysoev](http://sysoev.ru/en/)**

---

<div class="post-metadata">

**Author:** ![pablo\_platt](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/d6d6ee/32.png) [@pablo\_platt](https://www.ruby-forum.com/u/pablo_platt)\
**Post date:** [May 10, 2010, 1:02pm UTC](https://www.ruby-forum.com/t/redirect-https-to-https-www-produce-untrusted-connection/188301/3 "2010-05-10T13:02:27Z")

</div>

I still can’t redirect https:// to [https://www](https://www) but maybe I need the  
certificate to support https:// for this to work.

Thanks

---

<div class="post-metadata">

**Author:** ![pablo\_platt](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/d6d6ee/32.png) [@pablo\_platt](https://www.ruby-forum.com/u/pablo_platt)\
**Post date:** [May 10, 2010, 1:12pm UTC](https://www.ruby-forum.com/t/redirect-https-to-https-www-produce-untrusted-connection/188301/4 "2010-05-10T13:12:24Z")

</div>

On Mon, May 10, 2010 at 02:01:16PM +0300, pablo platt wrote:

> I still can’t redirect https:// to [https://www](https://www) but maybe I need the  
> certificate to support https:// for this to work.

Yes, you need the certificate for [example.com](http://example.com).

> > > [http://example.com](http://example.com) redirect to [http://www.example.com](http://www.example.com) - works
> > 
> > –  
> > Igor S.  
> > [Igor Sysoev](http://sysoev.ru/en/)
> > 
> > * * *
> > 
> > nginx mailing list  
> > [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
> > [mailman.nginx.org archive](http://nginx.org/mailman/listinfo/nginx)

> * * *
> 
> nginx mailing list  
> [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
> [mailman.nginx.org archive](http://nginx.org/mailman/listinfo/nginx)

–  
Igor S.

> **[Igor Sysoev](http://sysoev.ru/en/)**