acmetool.sh redirects www to non-www

• CentOS Version: CentOS 7 64bit
• Centmin Mod Version Installed: 123.09beta01
• Nginx Version Installed: latest or next update to latest
• PHP Version Installed: 7.1.x
• MariaDB MySQL Version Installed: 10.1.21
• When was last time updated Centmin Mod code base ? : today

Used acmetool.sh to set up https right off the bat and I can't seem to find anything in my vhost file that redirects www to non-www. I always thought the two versions were available right away and we had to set up redirects ourselves (or maybe I'm thinking without using acmetool).

Code (Text):

#x# HTTPS-DEFAULT
 server {
   
  server_name domain.com www.domain.com;
  return 302 https://$server_name$request_uri;
 }

server {
  listen 443 ssl http2;
  server_name domain.com www.domain.com;

Placing redirects under the sever_name line just makes browsers error out because of too many redirects. I tried on private browsing modes.

What's causing www to redirect to non-www?

---

 

Maybe I should have done this? (www included)

Code (Text):

./acmetool.sh issue www.domain.com lived

 

I did :

Code (Text):

cd /usr/local/src/centminmod/addons
./acmetool.sh issue domain.com lived

Didn't work the first time because DNS didn't propagate I figure.

I then ran :

Code (Text):

cd /usr/local/src/centminmod/addons
./acmetool.sh reissue domain.com lived

SSL was installed successfully after the above.

The aim was to set up Wordpress with www and re-direct non-www to www. Without even touching my vhost file, it redirected www to non-www and when I try to redirect, the browser reports too many redirects.

 

return 302 https://www.newdomain.com$request_uri; makes my browser say too many redirects, which is strange to me since I have other vhost files that work fine.

Do you think it's just my browser caching the redirects even in private mode?

 

File name: domain.com.ssl.conf (no domain.com.conf file)

Code (Text):

#x# HTTPS-DEFAULT
 server {
   
  server_name domain.com www.domain.com;
  return 302 https://$server_name$request_uri;
 }

server {
  listen 443 ssl http2;
  server_name domain.com www.domain.com;

  include /usr/local/nginx/conf/ssl/domain.com/domain.com.crt.key.conf;
  include /usr/local/nginx/conf/ssl_include.conf;

  http2_max_field_size 16k;
  http2_max_header_size 32k;
  # mozilla recommended
  ssl_ciphers blah blah blah
  ssl_prefer_server_ciphers   on;
  #add_header Alternate-Protocol  443:npn-spdy/3;

  # before enabling HSTS line below read centminmod.com/nginx_domain_dns_setup.html#hsts
  #add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
  #add_header X-Frame-Options SAMEORIGIN;
  #add_header X-Xss-Protection "1; mode=block" always;
  #add_header X-Content-Type-Options "nosniff" always;
  #spdy_headers_comp 5;
  ssl_buffer_size 1369;
  ssl_session_tickets on;
 
  # enable ocsp stapling
  resolver 8.8.8.8 8.8.4.4 valid=10m;
  resolver_timeout 10s;
  ssl_stapling on;
  ssl_stapling_verify on;

# ngx_pagespeed & ngx_pagespeed handler
#include /usr/local/nginx/conf/pagespeed.conf;
#include /usr/local/nginx/conf/pagespeedhandler.conf;
#include /usr/local/nginx/conf/pagespeedstatslog.conf;

  # limit_conn limit_per_ip 16;
  # ssi  on;

  access_log /home/nginx/domains/domain.com/log/access.log combined buffer=256k flush=5m;
  error_log /home/nginx/domains/domain.com/log/error.log;

  include /usr/local/nginx/conf/autoprotect/domain.com/autoprotect-domain.com.conf;
  root /home/nginx/domains/domain.com/public;
  # uncomment cloudflare.conf include if using cloudflare for
  # server and/or vhost site
  #include /usr/local/nginx/conf/cloudflare.conf;
  include /usr/local/nginx/conf/503include-main.conf;

  location / {

  include /usr/local/nginx/conf/wpsecure.conf;
  include /usr/local/nginx/conf/wpnocache.conf;

  try_files $uri $uri/ /index.php?q=$request_uri;
  include /usr/local/nginx/conf/503include-only.conf;

# block common exploits, sql injections etc
#include /usr/local/nginx/conf/block.conf;

  # Enables directory listings when index file not found
  #autoindex  on;

  # Shows file listing times as local time
  #autoindex_localtime on;

  # Wordpress Permalinks example
  #try_files $uri $uri/ /index.php?q=$uri&$args;

  }

  include /usr/local/nginx/conf/pre-staticfiles-local-domain.com.conf;
  include /usr/local/nginx/conf/pre-staticfiles-global.conf;
  include /usr/local/nginx/conf/staticfiles.conf;
  include /usr/local/nginx/conf/php.conf;
 
  include /usr/local/nginx/conf/drop.conf;
  #include /usr/local/nginx/conf/errorpage.conf;
  include /usr/local/nginx/conf/vts_server.conf;
}

 

For some reason that just points me to the other domain I have on the server.

 

@eva2000 This only happens when creating a vhost domain with SSL right off the bat using the addon. Everything works fine when I switch a regular vhost to Let's Encrypt SSL.

 

PM'd it.

 

1st :

HTTP/1.1 302 Moved Temporarily
Date: Sun, 15 Oct 2017 02:01:55 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: https://www.domain.org/

2nd :

HTTP/1.1 302 Moved Temporarily
Date: Sun, 15 Oct 2017 02:02:55 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: https://www.domain.org/

3rd :

HTTP/1.1 200 OK
Date: Sun, 15 Oct 2017 02:03:28 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Vary: Accept-Encoding
Link: <https://domain.org/wp-json/>; rel="REST API Handbook | WordPress Developer Resources"
Link: <https://wp.me/some-numbers-here>; rel=shortlink


4th :

HTTP/1.1 301 Moved Permanently
Date: Sun, 15 Oct 2017 02:04:25 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Location: https://domain.org/

I type the domain name in the hostname field and it returns grade A for both. In the box near the grade, it only shows the IP address and test time. The domain name is only displayed at the top heading.

Going to try removing non-www from server_name now. Will post the outcome soon.

 

This just breaks the SSL. The browser brings up the security warning after I restart nginx for the effects to take place and you have to press the advance link to proceed when going to the site.

 

But there isn't anything in the config file for redirects yet www gets redirected to non-www. When I do set up a redirect to www, Chrome gets the redirect loop problem.

I used Chrome incognito mode without setting up a redirect and www redirects to non-www.

Edit: Even proxies are redirecting www to non-www but there isn't anything in config.ssl demanding it does.