# Redirect http://*** to https://***
RewriteEngine On

SSLOptions +OptRenegotiate +StdEnvVars
SSLVerifyClient optional
SSLVerifyDepth 3
SSLRequire (%{SSL_CLIENT_S_DN_O} == "Massachusetts Institute of Technology" \
    && %{SSL_CLIENT_S_DN_Email} in {"braswell@MIT.EDU", "seansoni@MIT.EDU", "ldecastr@MIT.EDU", "vmohan@MIT.EDU", "adamc@MIT.EDU", "ameyer@MIT.EDU", "anniej@MIT.EDU", "bce@MIT.EDU", "mnjy@MIT.EDU", "tashas@MIT.EDU", "emshen@MIT.EDU", "ink@MIT.EDU", "hyun94@MIT.EDU", "svente@MIT.EDU", "jasmeet@MIT.EDU", "robibhat@MIT.EDU", "tomascg@MIT.EDU", "mxruedag@MIT.EDU", "juliaguo@MIT.EDU", "joyceh@MIT.EDU", "ekl@MIT.EDU", "splitluk@MIT.EDU", "prekshan@MIT.EDU", "devneal@MIT.EDU", "neub@MIT.EDU", "dppillai@MIT.EDU", "madksev@MIT.EDU", "mstoica@MIT.EDU", "sorawit@MIT.EDU", "suhasv@MIT.EDU", "shidanxu@MIT.EDU", "wgxue@MIT.EDU", "epwalker@MIT.EDU", "wallace_@MIT.EDU", "luyizh@MIT.EDU", "mcover@MIT.EDU", "zoki@mit.edu"}) \
  || (%{SSL_CLIENT_S_DN_O} == "MIT Computer Science & Artificial Intelligence Laboratory" \
    && %{SSL_CLIENT_S_DN_Email} in {"ryadegar@CSAIL.MIT.EDU", "adamc@CSAIL.MIT.EDU", "meyer@CSAIL.MIT.EDU", "ftl@CSAIL.MIT.EDU", "dmjones@CSAIL.MIT.EDU", "ronitt@CSAIL.MIT.EDU", "karger@CSAIL.MIT.EDU", "lynch@CSAIL.MIT.EDU", "meyer@CSAIL.MIT.EDU", "cel@CSAIL.MIT.EDU", "moitra@CSAIL.MIT.EDU", "marten@CSAIL.MIT.EDU", "adamc@CSAIL.MIT.EDU", "chinmay@CSAIL.MIT.EDU", "brooke@CSAIL.MIT.EDU", "cyrbritt@CSAIL.MIT.EDU", "devadas@CSAIL.MIT.EDU", "dmjones@CSAIL.MIT.EDU", "zoki@csail.mit.edu"}) \
  || (%{SSL_CLIENT_S_DN_O} == "Massachusetts Institute of Technology" \
   && %{SSL_CLIENT_S_DN_Email} in {"hwang123@MIT.EDU", "a2z@MIT.EDU", "adchoe@MIT.EDU", "advaith@MIT.EDU", "alexh95@MIT.EDU", "amadoa@MIT.EDU", "amyhuang@MIT.EDU", "anastasi@MIT.EDU", "aneuman@MIT.EDU", "archanar@MIT.EDU", "arinze@MIT.EDU", "ascampos@MIT.EDU", "asludds@MIT.EDU", "bkhadka@MIT.EDU", "braswell@MIT.EDU", "cajubelt@MIT.EDU", "cali_g@MIT.EDU", "carpmh17@MIT.EDU", "catheryn@MIT.EDU", "ccassidy@MIT.EDU", "chenjy@MIT.EDU", "cjdesno@MIT.EDU", "csloan@MIT.EDU", "csquires@MIT.EDU", "csweeney@MIT.EDU", "ctjones@MIT.EDU", "cxf@MIT.EDU", "danicarr@MIT.EDU", "delerme@MIT.EDU", "detienne@MIT.EDU", "dgrullon@MIT.EDU", "dkogut@MIT.EDU", "dzs@MIT.EDU", "ebenz@MIT.EDU", "ebridges@MIT.EDU", "ehhu@MIT.EDU", "ejpinos@MIT.EDU", "elacava@MIT.EDU", "eleanorp@MIT.EDU", "eman17@MIT.EDU", "epearson@MIT.EDU", "evanb@MIT.EDU", "fakoko@MIT.EDU", "fshair@MIT.EDU", "germans@MIT.EDU", "gertler@MIT.EDU", "gsellers@MIT.EDU", "gustavom@MIT.EDU", "hcg@MIT.EDU", "hdiehl@MIT.EDU", "helenmr@MIT.EDU", "hsteven@MIT.EDU", "hyunjong@MIT.EDU", "inspired@MIT.EDU", "itinawi@MIT.EDU", "iyrodrig@MIT.EDU", "janner@MIT.EDU", "jefflu@MIT.EDU", "jhyde@MIT.EDU", "jimenezl@MIT.EDU", "jinwkim@MIT.EDU", "jitesh@MIT.EDU", "jmhan@MIT.EDU", "jmpena17@MIT.EDU", "jpeurifo@MIT.EDU", "jtomazin@MIT.EDU", "jtylock@MIT.EDU", "jvahey@MIT.EDU", "jxwang@MIT.EDU", "kadauber@MIT.EDU", "kelseyc@MIT.EDU", "kelswong@MIT.EDU", "kevinaer@MIT.EDU", "khanhn@MIT.EDU", "kimberli@MIT.EDU", "klathem@MIT.EDU", "kmuhlrad@MIT.EDU", "koha@MIT.EDU", "kretsch@MIT.EDU", "kwoldu@MIT.EDU", "label@MIT.EDU", "lagrassa@MIT.EDU", "landmann@MIT.EDU", "larryw@MIT.EDU", "lhford@MIT.EDU", "liandrea@MIT.EDU", "limg@MIT.EDU", "lknight@MIT.EDU", "lmount@MIT.EDU", "lsherman@MIT.EDU", "ltellez@MIT.EDU", "macaroli@MIT.EDU", "mashady@MIT.EDU", "mcyuan@MIT.EDU", "mdhwang@MIT.EDU", "medranom@MIT.EDU", "mfeffer@MIT.EDU", "mflauer@MIT.EDU", "mikewang@MIT.EDU", "mirichoi@MIT.EDU", "mitchelm@MIT.EDU", "mqiu@MIT.EDU", "mreeves@MIT.EDU", "mwang316@MIT.EDU", "mxw18@MIT.EDU", "nehring@MIT.EDU", "nehring@MIT.EDU", "neriam@MIT.EDU", "nicko96@MIT.EDU", "nischal@MIT.EDU", "nkwate@MIT.EDU", "oguevara@MIT.EDU", "oliveren@MIT.EDU", "osmanyc@MIT.EDU", "pcherner@MIT.EDU", "pcherner@MIT.EDU", "phuvp@MIT.EDU", "porrson@MIT.EDU", "prela@MIT.EDU", "pwgreene@MIT.EDU", "quangle@MIT.EDU", "rach@MIT.EDU", "raywang@MIT.EDU", "rohanb@MIT.EDU", "rrk@MIT.EDU", "rsyang@MIT.EDU", "ruili@MIT.EDU", "ruthpark@MIT.EDU", "rvasen@MIT.EDU", "rverkuil@MIT.EDU", "rzwang@MIT.EDU", "samirw@MIT.EDU", "seansoni@MIT.EDU", "sfierro@MIT.EDU", "shaund@MIT.EDU", "sophiase@MIT.EDU", "sourakov@MIT.EDU", "stone17@MIT.EDU", "symin95@MIT.EDU", "taranjit@MIT.EDU", "tleech@MIT.EDU", "tmansour@MIT.EDU", "tnorris@MIT.EDU", "victorz@MIT.EDU", "vslee@MIT.EDU", "vstaneva@MIT.EDU", "wcaruso@MIT.EDU", "wendywei@MIT.EDU", "yefrem@MIT.EDU", "zareenc@MIT.EDU", "zhangs@MIT.EDU", "zmiranda@MIT.EDU", "zpsaras@MIT.EDU"})


# Otherwise, ask for a password
AuthName "special directory"
AuthType Basic
AuthUserFile /afs/csail.mit.edu/proj/courses/6.042/www/data/.htpasswd-6042-colleague
require valid-user


RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]