974524 - Auto-redirect HTTP to HTTPS on oneanddone.mozilla.org

Status: VERIFIED FIXED

(Infrastructure & Operations :: IT-Managed Tools, task)

Description

[Osmose [:osmose, :mkelly]]

One and Done supports https, now we'd like it to _not_ support http by auto-redirecting all http traffic to the https version of the site. I couldn't figure out a way to do this myself via the paas, so I figure it should happen at some other level I can't touch.

Let me know if there's anything I need to do. Thanks!

Comment 1

[Chris Turra [:cturra]]

i have added this to the load balancers redirect traffic script.

$ curl -IL http://oneanddone.mozilla.org
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Date: Wed, 19 Feb 2014 18:45:07 GMT
Location: https://oneanddone.mozilla.org/
Connection: Keep-Alive
Content-Length: 0

HTTP/1.1 301 Moved Permanently
vary: Accept-Language
content-type: text/html; charset=utf-8
Date: Wed, 19 Feb 2014 18:45:09 GMT
Location: https://oneanddone.mozilla.org/en-US/
connection: keep-alive
x-frame-options: DENY
content-length: 0

HTTP/1.1 200 OK
vary: Cookie
x-frame-options: DENY
content-type: text/html; charset=utf-8
content-length: 9053
set-cookie: anoncsrf=06sIbr7EkxsWRiEKjrf40D2rSyS85uUg; expires=Wed, 19-Feb-2014 20:45:09 GMT; httponly; Max-Age=7200; Path=/; secure
connection: keep-alive
Date: Wed, 19 Feb 2014 18:45:09 GMT

Comment 2

[Stephen Donner [:stephend] Not actively reading bugmail]

Verified FIXED, thanks; http://oneanddone.mozilla.org/ does indeed 301 -> https://oneanddone.mozilla.org/