1238599 - Zeus redirect brasstacks.mozilla.com HTTP to HTTPS

Status: VERIFIED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Ed Morley [:emorley]]

Please can Zeus be configured to 301 redirect HTTP to HTTPS for http://brasstacks.mozilla.com - since at the moment it will accept HTTP connections (which could lead to inadvertent use of the API in bug 1235097 over unencrypted HTTP).

Many thanks :-)

Comment 1

[Ed Morley [:emorley]]

Note that there's a nginx redirect on the site root to the HTTPS OrangeFactor page, so when testing you'll need to use a sub-page instead, eg

[~/src]$ curl -I "http://brasstacks.mozilla.com/orangefactor/"
HTTP/1.1 200 OK
Server: nginx/0.8.54
Date: Mon, 11 Jan 2016 16:16:50 GMT
Content-Type: text/html
Content-Length: 10757
Last-Modified: Mon, 11 Jan 2016 16:00:37 GMT
Connection: keep-alive
Accept-Ranges: bytes

Comment 2

[Eric Ziegenhorn :ericz]

Zeus redirect created and verified.  Now-unused pool brasstacks1.dmz.scl3:80 removed.

Comment 3

[Ed Morley [:emorley]]

Looking good - many thanks :-)

[~/src]$ curl -I "http://brasstacks.mozilla.com/orangefactor/api/"
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Date: Thu, 14 Jan 2016 12:11:58 GMT
Location: https://brasstacks.mozilla.com/orangefactor/api/
Connection: Keep-Alive
Content-Length: 0