RedirectMatch blocks SSL auto renewal

  • Resolved NPLD

    (@npld)


    2 years, 6 months ago

    My web hosting provider claims, that the below line (found in the All In One WP Security part of htaccess) blocks for auto renewal of the SSL certificate. Can this be right and if so, how do prevent this from happen in the future?

    RedirectMatch 403 \.well\-known/host\-meta

    Hope someone can help me – thanks ??

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Support vupdraft

    (@vupdraft)

    Hi,

    Yes that’s correct, you have a redirect rule to stop users accessing your public directory where the .wll-known folder resides.
    You can Backup your .htaccess in the Settings tab, remove this rule, wait for your SSL to auto renew and then restore the the old .htaccess in the Settings tab.
    Alternatively, you can ask you hosting how to manually renew the SSL certificate (this is the safer option)

    Thread Starter NPLD

    (@npld)

    Thank you for your answer!

    Is it a specific feature in the plugin settings, which places this redirect rule?

    Plugin Support vupdraft

    (@vupdraft)

    It’ likely because of your Filesystem Security setting.

    Thread Starter NPLD

    (@npld)

    Ok, I just found out that it’s the “Enable legacy 5G firewall protection” feature, that places the RedirectMatch rule which blocks SSL auto renewal.

    Does it make our site much more vulnerable if I turn this feature off? The 6G feature is still on.

    Thanks in advance ??

    Plugin Support aporter

    (@aporter)

    Hi,

    Yes theres no need to have 5G rules turned on if you got the 6G enabled.

    Best Wishes,

    Ashley

    Thread Starter NPLD

    (@npld)

    Ok, so your answer is actually no to my question ??

    Plugin Support aporter

    (@aporter)

    Hi,

    Sorry for not being clear.

    6G is an upgraded version of 5G so your site is more secure running the 6G rule set compared to the 5G.

    It also means if you have 6G on then theres no reason to run the 5G rules as well.

    Best Wishes,

    Ashley

    Thread Starter NPLD

    (@npld)

    Ok, thanks for clearing that up ??

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘RedirectMatch blocks SSL auto renewal’ is closed to new replies.