Bulk changing all websites from SSL to non-SSL (443 to 80)

Question

Level 1

0 points

Bulk changing all websites from SSL to non-SSL (443 to 80)

While I was cleaning up my Mountain Lion Server, I innocently updated some SSL server certificates.

Shortly afterwards, I found that ALL my HTTP (80) sites didn't work. I went into the Server.app and found that ALL my sites were now using port 443, rather than the port 80 that they were running on.

Since I have over 100 sites, I need to know how to BULK update them back by removing the certificate they were assigned when I updated that specific cert.

How did I update the certificate? I was looking at the Alerts section of the Server.app, that told me that some were expiring. There was a Replace button and that's what I clicked. I was never warned that it would change ALL my sites from having NO certificate to the certification that I replaced.

Any ideas on how to resolve this issue quickly, without having to open up EACH site and change the certification to NONE (and thus changing the port back to 80)?

Server.app-OTHER, OS X Mountain Lion (10.8.5)

Posted on Nov 7, 2013 2:38 AM

Reply

Answer 1

Nov 7, 2013 5:13 AM in response to spxis

There's no bulk update via the GUI [1], which leaves shutting off Server.app and mass-editing the Apache data.

For a bulk change of 443 to 80, something like this should get you started.

FWIW, Do also confirm whether the port 80 sites are still around in the configuration data, as some web browsers are now selecting 443 whenever that's available.

[1] Yes, I'm probably ignoring scripting via AppleScript here. If I have to script something, it'll be the Apache data and not the GUI, and using bash, Python or other such and likely not AppleScript. Local preference.

Reply

Answer 2

UptimeJeff

Level 4

3,479 points

Nov 7, 2013 5:26 AM in response to MrHoffman

I had client run into the same issue.... I was surprised to see all the sites switched to ssl.

Anyway - you can change them via the Certificates section. Go to Custom and change them from having a cert to NONE. That switches them back to port 80.

* I know this works in 10.8, pretty sure it works in 10.9 also.

Reply