https://github.com/bddjr/hlfhr
🌐 Redirecting from HTTP to HTTPS on the same port, similar to nginx's error_page 497. It can also redirect from port 80 to port 443.
https://github.com/bddjr/hlfhr
go go-mod go-module go-package golang https https-server httpserver redirect ssl
Last synced: 4 months ago
JSON representation
🌐 Redirecting from HTTP to HTTPS on the same port, similar to nginx's error_page 497. It can also redirect from port 80 to port 443.
- Host: GitHub
- URL: https://github.com/bddjr/hlfhr
- Owner: bddjr
- License: bsd-3-clause
- Created: 2024-03-30T02:27:18.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-04-06T05:21:41.000Z (7 months ago)
- Last Synced: 2025-05-07T05:07:26.274Z (6 months ago)
- Topics: go, go-mod, go-module, go-package, golang, https, https-server, httpserver, redirect, ssl
- Language: Go
- Homepage:
- Size: 153 KB
- Stars: 14
- Watchers: 2
- Forks: 6
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
README
# HTTPS Listener For HTTP Redirect
Redirecting from HTTP to HTTPS on the ***same port***, similar to [nginx's `error_page 497`](https://github.com/bddjr/hlfhr/discussions/18).
It can also redirect from port 80 to port 443.
> This is my original work - the first solution to [the issue](https://github.com/golang/go/issues/49310) without modifying the standard library.
> If you like it, please give me a star⭐. Thanks! 😊
## Setup
```
go get github.com/bddjr/hlfhr
```
```go
// Use hlfhr.New
srv := hlfhr.New(&http.Server{
// Write something...
})
// Port 80 redirects to port 443.
// This option only takes effect when listening on port 443.
srv.Listen80RedirectTo443 = true
// Then just use it like [http.Server]
err := srv.ListenAndServeTLS("example.crt", "example.key")
```
For example:
- Listening on port 8443, `http://127.0.0.1:8443` will redirect to `https://127.0.0.1:8443`.
- Listening on port 443, `http://127.0.0.1` will redirect to `https://127.0.0.1`.
If you need to customize the redirect handler, see [HttpOnHttpsPortErrorHandler Example](#httponhttpsporterrorhandler-example).
---
## Logic
```mermaid
flowchart TD
Read("Hijacking net.Conn.Read")
IsLooksLikeHTTP("First byte looks like HTTP ?")
CancelHijacking(["✅ Cancel hijacking..."])
ReadRequest("🔍 Read request")
IsHandlerExist("`
HttpOnHttpsPort
ErrorHandler
exist ?`")
Redirect{{"🟡 307 Redirect"}}
Handler{{"💡 Handler"}}
Close(["❌ Close."])
Read --> IsLooksLikeHTTP
IsLooksLikeHTTP -- "🔐false" --> CancelHijacking
IsLooksLikeHTTP -- "📄true" --> ReadRequest --> IsHandlerExist
IsHandlerExist -- "✖false" --> Redirect --> Close
IsHandlerExist -- "✅true" --> Handler --> Close
```
---
## HttpOnHttpsPortErrorHandler Example
> If you need `http.Hijacker` or `http.ResponseController.EnableFullDuplex`, please use [hahosp](https://github.com/bddjr/hahosp).
```go
// Check Host Header
srv.HttpOnHttpsPortErrorHandler = http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
hostname, port := hlfhr.SplitHostnamePort(r.Host)
switch hostname {
case "localhost":
//
case "www.localhost", "127.0.0.1":
r.Host = hlfhr.HostnameAppendPort("localhost", port)
default:
w.WriteHeader(421)
return
}
hlfhr.RedirectToHttps(w, r, 307)
})
```
```go
// Script Redirect
srv.HttpOnHttpsPortErrorHandler = http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Content-Type", "text/html")
w.WriteHeader(300)
io.WriteString(w, "location.protocol='https:'")
})
```
---
## Method Example
#### New
```go
srv := hlfhr.New(&http.Server{
// Write something...
})
```
#### NewServer
```go
srv := hlfhr.NewServer(&http.Server{
// Write something...
})
```
#### ListenAndServeTLS
```go
// Just use it like [http.ListenAndServeTLS]
var h http.Handler
err := hlfhr.ListenAndServeTLS(":443", "localhost.crt", "localhost.key", h)
```
#### ServeTLS
```go
// Just use it like [http.ServeTLS]
var l net.Listener
var h http.Handler
err := hlfhr.ServeTLS(l, h, "localhost.crt", "localhost.key")
```
#### Redirect
```go
var w http.ResponseWriter
hlfhr.Redirect(w, 307, "https://example.com/")
```
#### RedirectToHttps
```go
var w http.ResponseWriter
var r *http.Request
hlfhr.RedirectToHttps(w, r, 307)
```
#### SplitHostnamePort
```go
hostname, port := hlfhr.SplitHostnamePort("[::1]:5678")
// hostname: [::1]
// port: 5678
```
#### Hostname
```go
hostname := hlfhr.Hostname("[::1]:5678")
// hostname: [::1]
```
#### Port
```go
port := hlfhr.Port("[::1]:5678")
// port: 5678
```
#### HostnameAppendPort
```go
Host := hlfhr.HostnameAppendPort("[::1]", "5678")
// Host: [::1]:5678
```
#### ReplaceHostname
```go
Host := hlfhr.ReplaceHostname("[::1]:5678", "localhost")
// Host: localhost:5678
```
#### ReplacePort
```go
Host := hlfhr.ReplacePort("[::1]:5678", "7890")
// Host: [::1]:7890
```
#### Ipv6CutPrefixSuffix
```go
v6 := hlfhr.Ipv6CutPrefixSuffix("[::1]")
// v6: ::1
```
#### IsHttpServerShuttingDown
```go
var srv *http.Server
isShuttingDown := hlfhr.IsHttpServerShuttingDown(srv)
```
#### Server.IsShuttingDown
```go
var srv *hlfhr.Server
isShuttingDown := srv.IsShuttingDown()
```
#### NewResponse
```go
var c net.Conn
var h http.Handler
var r *http.Request
w := NewResponse(c, true)
h.ServeHTTP(w, r)
err := w.FlushError()
c.Close()
```
#### ConnFirstByteLooksLikeHttp
```go
b := []byte("GET / HTTP/1.1\r\nHost: localhost\r\n\r\n")
looksLikeHttp := hlfhr.ConnFirstByteLooksLikeHttp(b[0])
```
#### NewBufioReaderWithBytes
```go
var c net.Conn
var b []byte
n, err := c.Read(b)
br := hlfhr.NewBufioReaderWithBytes(b, n, c)
```
#### BufioSetReader
```go
var r io.Reader
lr := &io.LimitedReader{R: r, N: 4096}
// Read header
br := bufio.NewReader(lr)
// Read body
hlfhr.BufioSetReader(br, r)
```
---
## Test
```
git clone https://github.com/bddjr/hlfhr
cd hlfhr
chmod +x run.sh
./run.sh
```
Then run the test command printed in the terminal to verify the response content is `Hello hlfhr!`.
Then access it via browser and use developer tools to confirm the protocol is `h2`.
---
## Reference
https://github.com/golang/go/issues/49310
https://github.com/golang/go
https://tls12.xargs.org/#client-hello
https://tls13.xargs.org/#client-hello
https://developer.mozilla.org/docs/Web/HTTP
https://nginx.org/en/docs/http/ngx_http_ssl_module.html#errors
---
## License
[BSD-3-clause license](LICENSE.txt)