Custom error page 403 (forbidden) if server only allow https

Spud2004

Is it possible to display a custom error page to http users when only https is allowed?

Horizon

Hello,
You can do this, but it would be useless.
Much better solution is to simply throw a redirect to HTTPS for any HTTP request.
Basically put the whole / in the 'Serve only over HTTPS' section.
What you want would throw error messages to almost all web browsers when the users type yourdomain.com.
By default, all websites are requested over HTTP first.
This is totally faulty, but this is the way it is.
And search engines might accidentally index your custom 403 pages.
If you still want to do the custom 403 page, you can use URLRewrite:
Check that the SSL_PROTOCOL CGI variable exists (or does not exist).
Forcefully redirecting to HTTPS is better than simply throwing error messages to HTTP users.
You can also use HSTS afterwards to tell web browsers to remember that your website requires HTTPS.
Is the 403 page idea what you truly wish to do?

Spud2004

Basically put the whole / in the 'Serve only over HTTPS' section.

Where is the server only section to put a "/" (URL Rewriting?)
I am using an ACME certificate.
Should the protocol be https or https+http when routing http traffic to https?
I changed to use both.

Spud2004

You got me there, Horizon.
1. Protocol:HTTP + HTTPS
2. Configure, General, Advanced parameters, Exclusively serve on HTTP. Virtual path: /
Thank you very much

Exclusively Serve On HTTPS: If a request's virtual path matches with one of the paths or the patterns declared in that table, and if the request was received on a non-secure (HTTP) connection, the server generates a redirection to the same virtual path but using HTTPS to force it to be served on a secure connection. The Exclusively Serve On HTTPS table is available only when the current host's Protocol is set to HTTP+HTTPS.