This is an example VHOST that redirects all HTTP requests to HTTPS - except ACME challenges. The reason for this post is to have something people can find when searching for such an example. ServerName _default_ # make a directory just for challenge files DocumentRoot ~/some-local-unique-path/ # do nothing RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

With Apache 2.4 or later you could use an IF statement: ServerName example.com ServerAlias www.example.com DocumentRoot ~/some-local-unique-path/ Redirect permanent / https://example.com/ Notes: Set your ServerName and ServerAlias appropriately Set DocumentRoot to an existing folder just for the ACME challenge file Set the domain name in the Redirect statement to your preferred name (from ServerName or ServerAlias) RewriteEngine on is not required when using just Redirect as in this example

Sorry Rudy but that looks like a mix of nginx and Apache. Won't work Oh, Happy Cake Day!

[image] rg305: ServerName * Well, this isn't valid Apache. And, as a template a common addition is ServerAlias [image] rg305: location /.well-known/acme-challenge/ { root ~/some-local-unique-path/; # make a directory just for challenge files try_files $uri =404; } That isn't valid Apache either. That's nginx code [image] rg305: RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L] There is no need to check HTTPS off in a VirtualHost for port 80. It will always be off. I posted an alternate in the offline group for further discussion

OK, how about this: ServerAdmin webmaster@localhost DocumentRoot /var/www/html # Redirect to HTTPS, except for ACME challenge RewriteEngine On RewriteCond %{REQUEST_URI} !^/\.well\-known/acme\-challenge/ RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R=301,L]

That is similar to my include file. RewriteEngine On # Exclude Let's Encrypt ACME from HTTPS redirect RewriteCond %{HTTPS} !=on RewriteCond %{REQUEST_URI} !^/.well-known/acme-challenge RewriteRule ^/(.*) https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L] If I were to drop the extraneous HTTPS check as @MikeMcQ mentioned, it would likely continue to function as expected.

Apache redirect everything except ACME challenge requests EXAMPLE

Help

Topic		Replies	Views
Alias for /.well-known/acme-challenge Server	5	34115	October 25, 2017
Redirect to HTTPS except localhost Help	6	243	June 18, 2025
Apache “Redirect” and http-01 Client dev	8	1344	November 30, 2018
Help with Apache redirects/rewrites Server	6	9286	July 28, 2018
Getting around apache configs with 443 redirects Help	2	1053	February 1, 2017

Apache redirect everything except ACME challenge requests EXAMPLE

Related topics