Bug 43609

Summary: OX EAS doesn't work with apache2/force_https
Product: UCS Reporter: Thomas Siedentopf <thomas.siedentopf>
Component: ApacheAssignee: UMC maintainers <umc-maintainers>
Status: RESOLVED DUPLICATE QA Contact: UMC maintainers <umc-maintainers>
Severity: normal    
Priority: P5 CC: best
Version: UCS 4.1   
Target Milestone: ---   
Hardware: Other   
OS: Mac OS X 10.1   
What kind of report is it?: --- What type of bug is this?: ---
Who will be affected by this bug?: --- How will those affected feel about the bug?: ---
User Pain: Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional):
Max CVSS v3 score:

Description Thomas Siedentopf 2017-02-22 13:43:16 CET 
OX EAS (Microsoft Enterprise Active Sync) does not work when apache2/force_https is enabled. Reason is that OX USM (Universal Synchronization Module - framework that is used by OX EAS) connects to the frontend Apache (com.openexchange.usm.ox.url=http://localhost/ajax -> see /opt/open-xchange/etc/usm.properties) but will also be forced to use https (because localhost is not excluded from the Apache Redirect) which will then fail.

Oxtender2 for MS Outlook most probably will also fail (because it also relies on USM).

A possible fix will be to add localhost from also beeing excluded from the redirect in /etc/apache2/mods-enabled/ssl.conf:

RewriteEngine on
RewriteCond %{HTTPS} off
RewriteCond %{REQUEST_URI} !=/server-status
+RewriteCond %{HTTP_HOST} !=localhost
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R=301,L]
Comment 1 Florian Best univentionstaff 2017-02-22 13:49:07 CET 

*** This bug has been marked as a duplicate of bug 43603 ***