Forum OpenACS Q&A: Re: Problems with https login

Collapse
Posted by Richard Hamilton on
Just for clarity here is a summary of the situation with oacs 5.4.3.

I have a server at an IP address (no domain name) running an http listener on port 8001 and an https listener on 8442. On OpenAcs 4.6.3 I had it set so that all logins were over a secure connection which meant that a request for http://xxx.xxx.xxx.xxx:8001/register/ would automatically transfer the connection to https://xxx.xxx.xxx.xxx:8442/register/

I have tried with OpenACS 5.4.3 and it doesn't work despite having all the same parameters settings.

The following Kernel parameters are set:

RegisterRestrictEntireServerToRegisteredUsersFilters  0
RegisterRestrictToSSLFilters  1
RestrictLoginToSSLP  0 [have also tried setting this to 1]
SystemURL  https://xxx.xxx.xxx.xxx:8442/

The following 'Main Site' parameters are set:

RestrictEntireServerToRegisteredUsersP  0
RestrictToSSL  acs-admin/* register/* index/*
RegistrationRedirectUrl  <Nothing Set> [have also tried inserting 'https://xxx.xxx.xxx.xxx:8442/register/'; here]

When I visit the Main Site index page and select 'Log in' I am expecting the request to be intercepted and redirected to the https listener. However this does not happen. The request occurs unaltered as per the 'Log in' link and therefore the request fails and times out.

This is the unaltered 'Log in' link as it appears in the browser:

http://xxx.xxx.xxx.xxx:8001/register/?return%5furl=http%3a%2f%2fxxx%2exxx%2exxx%2exxx%3a8001%2f

The behaviour is consistent with both Firefox and IE7.

If I connect specifically on the https listener then everything works fine. It is the automatic re-direct that is not working. I am not entirely sure if this is exactly the same issue as Jade had, or merely a closely related occurrence.

Any ideas gratefully received! :-|

Richard