Help With HTTP_RESPONSE

Hey, this is VERY helpful.

 

 

But not quite what the doctor order for my case of improper returnURLitus.

 

 

In my case, I have an SSO product that is mangling the original URL on redirect to login from an SSL frontend. Both servers are fronted by the BigIP, both running SSL on the BigIP.

 

So client requests https://serv1:443/page

 

The SSO webagent looks at the authentication headers and redirects to login page on https://serv2:443/login?encoded_original_urlhttp://serv1/page

 

The encoded URL now says "http" instead of "https" because the agent does not understand he is "https" on the front end.

 

So after successful login the client is redirected back to his original URL sans the little secure "S" in the scheme of the URL, i.e. http://serv1:443/page

 

 

But I do have unsecure port 80 pages on serv1, so this example would rewrite everything unsecure to secure and that's not quite what I need.

 

Can I check the Location's port for 443 and then replace "http://" with "https://" instead of checking clientside port for 443?

 

 

Or is there any easier way to make my virtual server on the BigIP listen to non-ssl and ssl on 443 and redirect the non-ssl requests to ssl?