How to use SSL with Flask

Question

I am trying to set up Flask to run on SSL, along with redirecting all HTTP traffic to HTTPS.

I am currently using Apache as a web server, and it is serving traffic on port 80 HTTP properly. However, when I move the configuration under the port 80 VirtualHost into the port 443 and set up redirection for port 80, redirection works but Apache keeps showing the Apache Test Page, and is not serving the Flask application. The error logs are not showing anything useful. The only error I see is Directory index forbidden by Options directive: /var/www/html. I don't even use /var/www/html, and I know this is mostly a warning for older browsers.

Here is my Apache virtual host set up:

LoadModule wsgi_module modules/mod_wsgi.so WSGISocketPrefix run/wsgi NameVirtualHost *:80 <VirtualHost *:80> RewriteEngine On RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} </VirtualHost> NameVirtualHost *:443 <VirtualHost *:443> SSLEngine on SSLEngine on SSLCertificateFile <<FILE PATH>> SSLCertificateKeyFile <<FILE PATH>> SSLCertificateChainFile <<FILE PATH>> SSLProtocol all -SSLv2 SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW WSGIPassAuthorization On WSGIDaemonProcess api processes=4 threads=1 WSGIProcessGroup api WSGIScriptAlias / /usr/local/app/api/current/conf/application.wsgi AddType text/html .py <Directory /usr/local/app/api/current/> Order deny,allow Allow from all </Directory> </VirtualHost>

What is wrong with it? When I copy all the WSGI and Directory lines into port 80, and copy out 443, it works properly.

Not really related to flask... perhaps remove the flask keyword? — thclark
– thclark, Commented Jun 8, 2017 at 11:16

Paolo Casciello · Accepted Answer · 2014-03-27 15:29:27Z

3

This question belongs to Super User.

Btw it's not Flask related. You're missing DocumentRoot directive in your VirtualHost definition. So Apache uses the default /var/www/html.

answered Mar 27, 2014 at 15:29

Paolo Casciello

8,2421 gold badge46 silver badges42 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

darksky Over a year ago

I have other applications running that don't have DocumentRoot, and they still work. In fact, flask.pocoo.org/docs/deploying/mod_wsgi does not mention DocumentRoot at all. I'll post this to SuperUser instead. Thanks.

sebisnow · Accepted Answer · 2016-07-19 15:47:56Z

Checkout SSlify. Using this small flask extension all traffic gets redirected from HTTP to HTTPS.

All you have to do is to run the following when initializing your flask app:

from flask import Flask from flask_sslify import SSLify app = Flask(__name__) sslify = SSLify(app)

Collectives™ on Stack Overflow

How to use SSL with Flask

2 Answers 2

1 Comment

Comments

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Related