How To Force Ssl?

[racetoni2]

How can i force blesta to use SSL?

[motuka]

  On 10/25/2015 at 8:30 PM, Licensecart said:

Well done mate never heard of HTTP:X-Forwarded-Proto before.

I read it somewhere in stackoverflow, but did not try it. Was looking also how to redirect all requests to https.

[Paul]

  On 11/8/2015 at 5:46 AM, motuka said:

I read it somewhere in stackoverflow, but did not try it. Was looking also how to redirect all requests to https.

 

Are you using a proxy server / load balancer?

[motuka]

  On 11/9/2015 at 10:24 PM, Paul said:

Are you using a proxy server / load balancer?

No. Why? I actually got mine working.

All requests are redirected to https:// www. my-domain .tld

[Paul]

  On 11/9/2015 at 10:50 PM, motuka said:

No. Why? I actually got mine working.

All requests are redirected to https:// www. my-domain .tld

 

Sounded like you may be based on the header.. but that's alright, if it's working, great! 

[motuka]

  On 11/9/2015 at 10:52 PM, Paul said:

Sounded like you may be based on the header.. but that's alright, if it's working, great! 

.htaccess 301

[Serendesk]

  On 10/1/2015 at 7:02 PM, racetoni2 said:

How can i force blesta to use SSL?

 

Hi mate,

 

I do this using the web server only but have to make sure that Blesta is never configured to handle it (otherwise redirect looping occurs). All order pages have Force Secure Connection (HTTPS) un-checked.

 

For those that are using nginx:

#catch all http 80 and redirect to https 443
server {

      listen 80;
      return 301 https://$host$request_uri;

}

[motuka]

  On 11/11/2015 at 11:29 PM, Daniel W said:

 

Hi mate,

 

I do this using the web server only but have to make sure that Blesta is never configured to handle it (otherwise redirect looping occurs). All order pages have Force Secure Connection (HTTPS) un-checked.

 

For those that are using nginx:

#catch all http 80 and redirect to https 443
server {

      listen 80;
      return 301 https://$host$request_uri;

}

Most resellers have no access to root. So the easiest way is .htaccess

[motuka]

And I did not use the internal .htaccess for this: in other words, I left those two lines commented: 

I then added this immediately after RewriteEngine on

  Quote

#First rewrite any request to the wrong domain to use the correct one (here www.)

RewriteCond %{HTTP_HOST} !^www\.

RewriteRule ^(.*)$ https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

 

#Now, rewrite to HTTPS:

RewriteCond %{HTTPS} off

RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

 

****This redirects all requests to https://www, if you want you can modify it.