Webmin and Webshell: redirect http to https

[JedMeister]

As of v14.0+ both Webmin and Webshell are hidden behind stunnel. That's all well and good, but ideally, it'd be nice if a user inadvertently tried to connect to them via http you would be auto-redirected to https. E.g.:

http://xxx.xxx.xxx.xxx:12321 --> https://xxx.xxx.xxx.xxx:12321

AFAIK stunnel only supports HTTPS (no support for vanilla HTTP at all) so to support this feature, we would need to use something other than stunnel. That means there is no lightweight immediate path forward but I figured it was worth noting...

[JedMeister]

I'm adding this to the v15.0 milestone. I'm not sure whether we'll be able to resolve it, but let's discuss.

Something which may be worth consideration is replacing stunnel with a proper webserver (e.g. Nginx) configured as a reverse proxy (and redirecting http -> https).

Another thought (not sure that it would fix this issue) is removing stunnel altogether and just let the apps "self serve"? I sort of like having them hidden behind something else, but allowing them to "self serve" is IMO a legitimate option.

[JedMeister]

I wonder if we might be able to use sslh to provide a mechanism to redirect http to https perhaps?

[JedMeister]

I'm moving this to v15.1 milestone. Assuming that we end up removing Webshell (#1019), then we'd probably also remove stunnel and allow Webmin to self-serve (again). So this issue may actually just resolve itself...