{"id":1409,"date":"2022-10-26T20:51:21","date_gmt":"2022-10-27T01:51:21","guid":{"rendered":"http:\/\/zewwy.ca\/?p=1409"},"modified":"2022-10-26T20:51:21","modified_gmt":"2022-10-27T01:51:21","slug":"acme-http-validation-with-https-redirection","status":"publish","type":"post","link":"https:\/\/zewwy.ca\/index.php\/2022\/10\/26\/acme-http-validation-with-https-redirection\/","title":{"rendered":"ACME HTTP Validation with HTTPs redirection"},"content":{"rendered":"<p>I had this got this to work with this requirement for an external A host record, redirects, negate rules. It was quite complex, and, in the end, it did work. I was excited, I got ready to write this long post, then I realized, I had somehow missed the obvious. I found this post on the forms with <a href=\"https:\/\/forum.opnsense.org\/index.php?topic=14976.0\">someone having the exact same issue<\/a> what amazed me the most, was how simple their solution was.<\/p>\n<p>So, I tested it&#8230;<\/p>\n<p>The HTTP to HTTPS redirect condition:<\/p>\n<p><a href=\"https:\/\/i.imgur.com\/mFBVD6w.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/i.imgur.com\/mFBVD6w.png\" alt=\"\" width=\"922\" height=\"779\" \/><\/a><\/p>\n<p>and this will take any HTTP request and convert them into HTTPS.\u00a0 If you configured HTTP validation though this will be a problem when the request from ACME comes in to hit the backend created by the ACME plugin.<\/p>\n<p>As stated by the guy, he simply made a clone of the condition, and made it a negate.<\/p>\n<p><a href=\"https:\/\/i.imgur.com\/t09z75L.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/i.imgur.com\/t09z75L.png\" alt=\"\" width=\"910\" height=\"582\" \/><\/a><\/p>\n<p>then apply it to the redirect rule&#8230;<\/p>\n<p><a href=\"https:\/\/i.imgur.com\/nxmKEV3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/i.imgur.com\/nxmKEV3.png\" alt=\"\" width=\"913\" height=\"774\" \/><\/a><\/p>\n<p>then apply this to the http listener<\/p>\n<p><a href=\"https:\/\/i.imgur.com\/Jv34niO.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/i.imgur.com\/Jv34niO.png\" alt=\"\" width=\"1163\" height=\"943\" \/><\/a><\/p>\n<p>Test a cert renewal&#8230; it worked<\/p>\n<p><a href=\"https:\/\/i.imgur.com\/YW4Y1o5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/i.imgur.com\/YW4Y1o5.png\" alt=\"\" width=\"971\" height=\"250\" \/><\/a><\/p>\n<p>That was way simpler than I thought up. lol<\/p>\n<p>Hope this helps someone.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I had this got this to work with this requirement for an external A host record, redirects, negate rules. It was quite complex, and, in the end, it did work. I was excited, I got ready to write this long post, then I realized, I had somehow missed the obvious. I found this post on &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/zewwy.ca\/index.php\/2022\/10\/26\/acme-http-validation-with-https-redirection\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;ACME HTTP Validation with HTTPs redirection&#8221;<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"sfsi_plus_gutenberg_text_before_share":"","sfsi_plus_gutenberg_show_text_before_share":"","sfsi_plus_gutenberg_icon_type":"","sfsi_plus_gutenberg_icon_alignemt":"","sfsi_plus_gutenburg_max_per_row":"","footnotes":""},"categories":[8],"tags":[18,315,121,164],"class_list":["post-1409","post","type-post","status-publish","format-standard","hentry","category-server-administration","tag-certificates","tag-haproxy","tag-https","tag-opnsense"],"_links":{"self":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/1409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/comments?post=1409"}],"version-history":[{"count":1,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/1409\/revisions"}],"predecessor-version":[{"id":1410,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/1409\/revisions\/1410"}],"wp:attachment":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/media?parent=1409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/categories?post=1409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/tags?post=1409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}