Naked domain to www domain redirection is broken

[dhinus]

description

Calls to https://example.com no longer redirect to https://www.example.com

A 403 error is returned instead.

This is a regression introduced by #2.

It's possible an "S3 Origin" does not work correctly if the bucket is set to "Redirect requests", or it might need different bucket policies.

@tnleeuw can you please have a look?

[tnleeuw]

I will have a look, I did not experience this myself. I might have to split the origin definitions? It might also be that it will take a little longer before AWS properly picks it up? It can take up to an hour before the redirects work correctly according to posts which I've read. Until then, CloudFront might redirect to the bucket URL which is private, therefore results in a 403.

…

--Tim

On Fri, 13 Apr 2018 at 20:29, Francesco Negri ***@***.***> wrote: description Calls to https://example.com no longer redirect to https://www.example.com A 403 error is returned instead. This is a regression introduced by #2 <#2>. It's possible an "S3 Origin" does not work correctly if the bucket is set to "Redirect requests", or it might need different bucket policies. @tnleeuw <https://github.com/tnleeuw> can you please have a look? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#4>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADitDSLPsRnBUqfe6i9W03kVjr1XUWg_ks5toO5ugaJpZM4TT4m0> .

[dhinus]

@tnleeuw I've waited a few hours and it's still not working. It's good to know it's working for you, though. I might have done something stupid on my side, I'll try again on Monday and let you know. Thanks for your help. :)

[tnleeuw]

I'll also have another look at it, either this weekend or Monday.

…

On Fri, 13 Apr 2018 at 22:21, Francesco Negri ***@***.***> wrote: @tnleeuw <https://github.com/tnleeuw> I've waited a few hours and it's still not working. It's good to know it's working for you, though. I might have done something stupid on my side, I'll try again on Monday and let you know. Thanks for your help. :) — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#4 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADitDSneGOQfzEM5Qct-m7RYvpUBlSOeks5toQjLgaJpZM4TT4m0> .

[tnleeuw]

Well I was sure that the redirection had worked but indeed on my site it doesn't work (anymore) either.... I think I know how to fix this, will probably have time to look at it Sunday / Monday. My apologies for causing this regression 😕

…

On Fri, 13 Apr 2018 at 22:22, Tim van der Leeuw ***@***.***> wrote: I'll also have another look at it, either this weekend or Monday. On Fri, 13 Apr 2018 at 22:21, Francesco Negri ***@***.***> wrote: > @tnleeuw <https://github.com/tnleeuw> I've waited a few hours and it's > still not working. It's good to know it's working for you, though. I might > have done something stupid on my side, I'll try again on Monday and let you > know. Thanks for your help. :) > > — > You are receiving this because you were mentioned. > Reply to this email directly, view it on GitHub > <#4 (comment)>, > or mute the thread > <https://github.com/notifications/unsubscribe-auth/ADitDSneGOQfzEM5Qct-m7RYvpUBlSOeks5toQjLgaJpZM4TT4m0> > . >

[dhinus]

Some additional info:

the bucket itself is redirecting

$ curl -L http://testone.our.buildo.io.s3-website-eu-west-1.amazonaws.com
Testone

but Cloudfront isn't

$ curl -L https://testone.our.buildo.io
<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>25E0438A27AEE110</RequestId><HostId>aW60i6XKBHmAFTaHGZuTLnzkzzK2UVryq78AXUEd37XZFM8zPpCVo/YxvxgKYlA3U34Dk

All the resources, including the buckets, were created from scratch. I had to hardcode aws_route53_zone.zone.name in the module because I only have a hosted zone for buildo.io and not for testone.our.buildo.io, but it seems unlikely to be the cause of the problem.

[gabro]

but Cloudformation isn't

you mean Cloudfront?

[tnleeuw]

Indeed I don't think that that would cause the problem. Thanks for the additional info. I think I'll have to change the code to create the CDN's separately, with different origin configs. Alternatively to create the redirect bucket with an Origin Policy similar to the first.

…

On Fri, 13 Apr 2018 at 22:30, Francesco Negri ***@***.***> wrote: Some additional info: the bucket itself is redirecting $ curl -L http://testone.our.buildo.io.s3-website-eu-west-1.amazonaws.com Testone but Cloudformation isn't $ curl -L https://testone.our.buildo.io <?xml version="1.0" encoding="UTF-8"?> <Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>25E0438A27AEE110</RequestId><HostId>aW60i6XKBHmAFTaHGZuTLnzkzzK2UVryq78AXUEd37XZFM8zPpCVo/YxvxgKYlA3U34Dk All the resources, including the buckets, were created from scratch. I had to hardcode aws_route53_zone.zone.name in the module because I only have a hosted zone for buildo.io and not for testone.our.buildo.io, but it seems unlikely to be the cause of the problem. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#4 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADitDdyn03I_kF7E2Z0EUs-xusW_R0Peks5toQr7gaJpZM4TT4m0> .

[dhinus]

you mean Cloudfront?

Yes, obviously 😄
I edited my previous comment!

[dhinus]

My apologies for causing this regression 😕

No problem, and thanks for working on this. Have a nice weekend!

[tnleeuw]

Thanks and enjoy the weekend too!

…

On Fri, 13 Apr 2018 at 22:39, Francesco Negri ***@***.***> wrote: My apologies for causing this regression 😕 No problem, and thanks for working on this. Have a nice weekend! — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#4 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADitDQC-hGF0XMFcufB4DDNweMmOkCP6ks5toQzmgaJpZM4TT4m0> .

[tnleeuw]

PR #5 fixes the issue for me.