Cannot Access site after enabling Force SSL... (please help)

[mandville]

I don't see how removing your site and reinstall. will help. perhaps look in the sql and see if any menu links are set to force ssl

[anoble87]

Use FTP and go to /configuration.php and open in an editor.
Look for:

Code: Select all

var $force_ssl = '1';

And change to:

Code: Select all

var $force_ssl = '0';

And save.

YOU ARE EFFIN GOD!!! THANK YOU SOOOOO MUCH!!! YOU SAVED MY TOOCUS!

[Fonias]

So easy?? I was trying to fix it for almost a week! You are great! Thank you sooo much!

[Joe Pinedo]

Hi Ankamarun,

Don't forget to inspect the permission of your configuration.php, make sure it is not 777.

See Cthree post for a good explanation on setting your configuration.php to the correct setting http://forum.joomla.org/viewtopic.php?p=106901

set the mode to 440 or 644 (read-only to everyone but you) depending on your webhosting environment.

good luck

NickHo

thanks buddy, i had the same problem, and i was trying to fix it by setting the ssl var value to 0 but after ftp the config.php file no efect, so it was a chmodd problem everything working fine now! thanks

[PhilD]

thanks buddy, i had the same problem, and i was trying to fix it by setting the ssl var value to 0 but after ftp the config.php file no efect, so it was a chmodd problem everything working fine now! thanks

you can download by ftp the config file when set to 444 but ftp will fail when trying to upload it back because the file on server is read only and can not be overwritten. Filezilla for example will place the failed result in the failed tab which is often overlooked leading to the assumption the file was uploaded successfully. Other ftp programs are similar.

You have to first set the config file on the server to 644 in order to upload the changes back to the server. Then change the file permission to 444 if desired when done. Joomla admin will automatically set to permission on the config file to 444 when any config edits are made from the admin end.

[Stara-Novalja]

Thank's to everyone I solve my problem in 30 sec ..

[simone18]

Hi. I am having the same problem and I am trying to do what Steve said, however; I am not finding the code that Steve mentioned. Can you help me please. My site has been down for hours. Thank you

[petey101b]

hi guys thanks for your help some more info :dl to desktop and changed ul to live site but would not work -so right clicked and changed permission rwx then edit the file change ssl to 0 and voila hope this helps

[PhilD]

Yep, if the config file is 444, then you can download the file with ftp but can not upload it back without first changing the permissions to 644 on the file that is on the server. Many ftp programs don't make it obvious the upload failed so you may think you uploaded the file and the edit you made didn;t work, when in fact you never actually uploaded the file successfully.

[i3loomy]

so i've done the same thing, but the solution provided is not working... now my site just says "No configuration file found and no installation code available. Exiting..." So what do i do now...

I think they should put a are you sure button in there... then after that ARE YOU REALLY SURE!

[i3loomy]

I finally got the SSL fix but now when ever i try to move off the index page i get.....

Not Found

The requested URL /clive-berghofer-recreation-centre was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at usqvenues.com.au Port 80

[cpetitclerc73]

Great. I got back into the admin section but this does not solve the entire problem.
I need my entire site secure and disabling the SSL is not the solution. I see this as a bug. Any ideas as to how to create a Joomla Administrator login that will work with an SSL certificate?

[twuni]

I ran into this problem, too, but none of the solutions provided in this thread helped. I found a solution, though, and figured I should share.

First, to explain my setup and the reason I needed to set that Force SSL flag in the first place. I'm running Nginx and serving Joomla 3 via both HTTP and HTTPS, proxying through PHP-FPM. I have Varnish handling all traffic on port 80, stripping out stuff like cookies and extraneous headers, and my privileged (authenticated) traffic goes unmolested to Nginx on port 443. Because Varnish is interfering with cookies on port 80, I need to force authenticated Joomla traffic to HTTPS only.

When I set the Force SSL flag in Joomla Administrator -> Global Configuration -> Server, I got into a redirect loop. From a curl inspection, I discovered that my request was being rewritten to an identical URL. That's what is causing our redirect loop.

After inspecting the Joomla 3 source code, I discovered that Joomla is checking for the

Code: Select all

$_SERVER["HTTPS"]

variable to determine whether to run the code associated with the Force SSL flag. The fix, then, is to set this variable whenever you're in an HTTPS context. In Nginx, this is as simple as adding

Code: Select all

fastcgi_param HTTPS yes;

to the location block responsible for proxying to Joomla (and, of course, only under the HTTPS-enabled server block).

So something like...

Code: Select all

server {
  listen 443;
  server_name example.com;
  ssl on;
  ...
  location ~ \.php$ {
    include fastcgi_params;
    fastcgi_param HTTPS yes;
    fastcgi_pass 127.0.0.1:9000;
    ...
  }
  ...
}

I'm not sure what this looks like in Apache, but the key here is to ensure that that CGI parameter is getting set when you're under HTTPS.

Hopefully this will help. Good luck!

[dbreise]

UPDATE: This turns out to have been user error...wrong configuration.php file. It was the typical problem as described above...$force_ssl setting was incorrect after all.
-----------------------------------------------------------------
After being in Force SSL for Administrator mode with a bad cert for a few days, the parameter was set back to 'none' using the administration interface. As expected, configuration.php contains:
public $force_ssl = '0';
There are no additional https references within configuration.php.

Yet, attempts to login to the administration interface are still being redirected to https://<same URL> which then fails with a 404.

Seems my Joomla installation is a bit confused about which mode it is in. Any ideas on other places to look for settings that would control this behavior?

Joomla 2.5, HostGator

[muttawa]

First I'd like to thank everyone who helped in solving the problem.

However, I solved my similar problem in the same way but only for the homepage. The rest of the articles (or menus) don't open :S.

I hope anyone can help me, my website is www.newincomas.com

[Per Yngve Berg]

I don't see any https links. Have you cleared the cache?

[hoangnguyen]

Today in the morning i've enabled the Forces the SSL for the entire site.. and now i could not access the site after that..... have done a lot of work on the site....

Would you please help me restore my site back to normal...

Any help on this regard is highly appreciated...

Arun

Hi,
I have just tested, and it worked well.
You should also clear your browser's cache and refresh the page after you clear the cache.
My demo is: http://quatangmayman.com
and back-end: https://quatangmayman.com/administrator/index.php
If you need account to login to test. Please PM me.

[rightestate]

Hi there I tried to change my domain into secure using HTTPS using this guide line https://www.joomlart.com/tutorials/joom ... oomla-site

now i cant open my website it appears https cut with red . website is down its a company website please HELP ME

i change back the .configure.php n the .htaccess back to normal but still the error comes as

This page is insecure (broken HTTPS).
Certificate Error
There are issues with the site's certificate chain (net::ERR_CERT_COMMON_NAME_INVALID).
Mixed Content: The page at 'https://biz.rightestate.co.uk/' was loaded over HTTPS, but requested an insecure script 'http://imptestrm.com/rg-main.php?_srg=1 ... tate.co.uk'. This request has been blocked; the content must be served over HTTPS.

where do i find the index.php in joomla to delete the lines

PLEASE HELP MEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE

[pe7er]

This page is insecure (broken HTTPS).
Certificate Error
There are issues with the site's certificate chain (net::ERR_CERT_COMMON_NAME_INVALID).
Mixed Content: The page at 'https://biz.rightestate.co.uk/' was loaded over HTTPS, but requested an insecure script 'http://imptestrm.com/rg-main.php?_srg=1 ... tate.co.uk'. This request has been blocked; the content must be served over HTTPS.

You are using the domain biz.rightestate.co.uk but the SSL Server Certificate issued by COMODO is valid for *.ehosts.com.

[rightestate]

Thank you very much i contacted ehost and they helped me and its working perfectly Thank you for your time @pe7er