HTTPS redirection on www.govmu.org

From: Ish Sookun <ish.sookun_at_lasentinelle.mu>
Date: Thu, 13 Dec 2018 20:30:34 +0400


Hello,

Did anyone notice that there is a temporary redirection to the HTTP
version of www.govmu.org if you access it over HTTPS?

Below is a curl output:

* Trying 202.123.27.113...
* TCP_NODELAY set
* Connected to www.govmu.org (202.123.27.113) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: C=MU; L=Port-Louis; O=National Computer Board; OU=NCB;
CN=*.govmu.org
* start date: Aug 16 00:00:00 2018 GMT
* expire date: Oct 29 12:00:00 2020 GMT
* subjectAltName: host "www.govmu.org" matched cert's "*.govmu.org"
* issuer: C=US; O=DigiCert Inc; CN=DigiCert SHA2 Secure Server CA
* SSL certificate verify ok.
> HEAD / HTTP/1.1
> Host: www.govmu.org
> User-Agent: curl/7.60.0
> Accept: */*
>
< HTTP/1.1 302 Redirect
HTTP/1.1 302 Redirect
< Content-Length: 168
Content-Length: 168
< Content-Type: text/html; charset=UTF-8
Content-Type: text/html; charset=UTF-8
< Location: http://www.govmu.org/Pages/VariationRoot.aspx
Location: http://www.govmu.org/Pages/VariationRoot.aspx
< X-MS-InvokeApp: 1; RequireReadOnly
X-MS-InvokeApp: 1; RequireReadOnly
< X-UA-Compatible: IE=Edge
X-UA-Compatible: IE=Edge
< Date: Thu, 13 Dec 2018 16:23:54 GMT
Date: Thu, 13 Dec 2018 16:23:54 GMT

Regards,

Ish Sookun
Received on Thu Dec 13 2018 - 16:30:59 PST

This archive was generated by hypermail 2.3.0 : Fri Dec 14 2018 - 06:00:03 PST