SSL offloading with a mostly-plain-http website

[Cantor, Scott]

> Here's what I started with:

Write a simple CGI script to dump the environment and you'll see the variables like SERVER_NAME, SERVER_PORT, and one called HTTPS that will contain "on" if it's https.

You need to configure Apache to make sure those are all set such that building a URL with them will give you the result you want when you access the vhost. Then make the CGI script a protected resource and the SP will work.

That's all up to Apache and is controlled with ServerName.

-- Scott