I wonder what is the relationship of ServerName & ServerAlias with host.file. As I know ServerName sets the hostname and port that the server uses to identify itself and ServerAlias is the alternate names for a host. But does the ServerName and ServerAlias need to be identified in host.file? Do we need to put the exact domain name or it can be an alternate name in ServerName or ServerAlias? Let's say my actual domain is www.example.com and I have set up SSL and my website are now run as https+www.example.com, now I'm trying to redirect my website from http+example.com when I type it in the browser and I expect my browser will redirect me to https+www.example.com, what ServerName or ServerAlias should I put in httpd-vhost.conf? Below are my host.file:

127.0.0.1 example.com www.example.com
::1 example.com www.example.com
127.0.0.1 localhost
::1 localhost

Below are my httpd-vhosts.conf:

<VirtualHost *:80>
    ServerName example.com
    ServerAlias www.example.com
    DocumentRoot "d:/wamp64/www/example"
    <Directory  "d:/wamp64/www/example/">
        Options +Indexes +Includes +FollowSymLinks +MultiViews
        AllowOverride All
        Order allow,deny
        Allow from all
        Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
    </Directory>
</VirtualHost>

Does my definition of ServerName and ServerAlias correct in httpd-vhosts.conf? This is what I put in .htacess to redirect my website from http+example.com to https+ww.example.com but it does not work and I believe it related with my definition of ServerName and ServerAlias:

RewriteCond %{HTTPS} !on 
RewriteCond %{HTTP_HOST} ^example\.com$
RewriteRule .* https://www.example.com%{REQUEST_URI} [R=301,L]

Below is the outcome of my redirection logs:

[perdir D:/wamp64/www/example/] RewriteCond: input='off' pattern='!on' => matched 
[perdir D:/wamp64/www/example/] RewriteCond: input='' pattern='^example\\.com$' => not-matched

This is what I get from Firefox debugger:

Update

I've update my .htaccess to below:

RewriteCond %{HTTP_HOST} example.com [NC]
RewriteRule .* https://www.example.com%{REQUEST_URI} [R=301,L]

I update my ServerName in vhost to www.example.com Here's the logs that I got:

example per-dir prefix: D:/wamp64/www/example/index.php/news-and-events/news-and-events/news -> index.php/news-and-events/news-and-events/news
applying pattern '.*' to uri 'index.php/news-and-events/news-and-events/news'
RewriteCond: input='off' pattern='!on' => matched
RewriteCond: input='www.example.com' pattern='example.com' [NC] => matched
rewrite 'index.php/news-and-events/news-and-events/news' -> 'https://www.example.com/index.php/news-and-events/news-and-events/news'
explicitly forcing redirect with https://www.example.com/index.php/news-and-events/news-and-events/news
trying to replace prefix D:/wamp64/www/example/ with /
escaping https://www.example.com/index.php/news-and-events/news-and-events/news for redirect
redirect to https://www.example.com/index.php/news-and-events/news-and-events/news [REDIRECT/301]

Here is what I got from firefox debugger raw header:

GEThttp://example.com/

Request URL:http://example.com/
Request Method:GET

Request Headers (328 B) 
Raw Headers
Host: example.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:74.0) Gecko/20100101 Firefox/74.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1

This is what I get from Microsoft Edge:

General
Request URL: http://example.com/
Referrer Policy: no-referrer-when-downgrade
Request Headers
Provisional headers are shown
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.163 Safari/537.36 Edg/80.0.361.111

Please help and do point me out if I've done anything wrong and thanks in advance!

Solution 1:

The host file (& how it's not related)

First, you don't need anything in your hosts file if the authoritative DNS for example.com is pointing to the public IP address of your server.

127.0.0.1 example.com www.example.com

This simply overrides the DNS when example.com is used from the same machine. It makes the server to use local loopback instead of the public IP, but in fact you seldom use a website from the server, anyway.

Relationship of ServerName & ServerAlias

It doesn't really matter whether the hostname matched against the Host header is in ServerName or ServerAlias; they are treated the same. It's just that you MUST have a single hostname as the ServerName and list of the other hostnames in the ServerAlias.

This is one of the conditions When not to use mod_rewrite

Your HTTP virtual host doesn't need to have any document root and it doesn't have to read the RewriteRule from the .htaccess, but you can redirect directly from the <VirtualHost> block, preferably using mod_alias instead of mod_rewrite.

Your configuration can be as short as:

<VirtualHost *:80> 
    ServerName example.com 
    ServerAlias www.example.com 
    Redirect permanent / https://www.example.com/
</VirtualHost>

Then, you can replace the second rewrite condition by adding a separate virtual host (in your httpd-ssl.conf) for non-www HTTPS:

<VirtualHost *:443> 
    ServerName example.com 

    # SSL cert/key headers here

    # This is the correct place for HSTS.
    Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"

    Redirect permanent / https://www.example.com/
</VirtualHost>

Now you have eliminated the need for any rewrite rules at all and using .htaccess files in the first place, which makes your configuration both simple and efficient.