redirect to https version only if $encrypted_only

[cgi-auth-flexible.git] / cgi-auth-flexible.pm

diff --git a/cgi-auth-flexible.pm b/cgi-auth-flexible.pm
index 4ab430d5f989affb6b080e1efe8401dedd5e518b..fbb9ab3529c1de1c0d28326395760d51dea6c9c2 100644 (file)
--- a/cgi-auth-flexible.pm
+++ b/cgi-auth-flexible.pm
@@ -506,7 +506,7 @@ sub _check_divert_core ($) {
 
     my $cooks = $r->_ch('get_cookie');
 
-    if (!$r->_ch('check_https')) {
+    if ($r->{S}{encrypted_only} && !$r->_ch('check_https')) {
         return ({ Kind => 'REDIRECT-HTTPS',
                   Message => $r->_gt("Redirecting to secure server..."),
                   CookieSecret => undef,