Enforce HTTPS for your virtualhosts
NameVirtualHost *:443 NameVirtualHost *:80 <VirtualHost *:80> ServerName example.org RewriteEngine on RewriteRule ^(.*)$ https://%{SERVER_NAME}$1 [L,R] </VirtualHost> <VirtualHost *:443> ServerName example.org DocumentRoot /var/www/example.org ... </VirtualHost>