Page MenuHomeVyOS Platform

HTTP-API redirect from http correct https port
Closed, ResolvedPublic

Description

nginx always listen on port http/80 and redirect to https/443

when set:

set service https api keys id test key '1234567890'
set service https virtual-host test listen-port '11443'

the redirect don't work. I see 2 expected behavior:

  1. don't listen on port 80, to get a "security feature"
  2. redirect to the correct listen-port

i personal would expect 1.

Details

Difficulty level
Unknown (require assessment)
Version
VyOS 1.4-rolling-202102230218, VyOS 1.3-beta-202102210443
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Event Timeline

rob created this object in space S1 VyOS Public.

Thanks @rob, it is true that nginx is not redirecting to a non canonical https port. Using the nginx custom https status code 497, this can be added; I will update the template accordingly.

N.B. for curl to redirect a post request, one needs to pass the arguments -L --post301

jestabro changed the task status from Open to Backport candidate.Feb 26 2021, 7:16 PM
jestabro triaged this task as Normal priority.
jestabro moved this task from Need Triage to Finished on the VyOS 1.4 Sagitta board.
jestabro moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus board.
SrividyaA set Issue type to Bug (incorrect behavior).Aug 31 2021, 12:59 PM