CiviCRM Community Forums (archive)

To clarify, this is a Drupal 7.26 site with CiviCRM 4.4.4. Visiting the site via https works fine in Firefox, no warnings. It's 128 bit, but that should be fine.

When I visit civicrm/admin/setting/url and set " Force Secure URLs (SSL) " to Yes it comes back and says:

>    You need to set up a secure server before you can use the Force Secure URLs option

and I don't know why.

All this is with with the leading "www" in the domain name.

EDIT: To clarify, SSLs work fine with CiviCRM on CiviHosting and we have many clients using them with no problems whatsoever. The issue in this case is something specific to this site.

I looked into the code and found that function checkURL was returning false. It is our analysis that this is due to the fact that authentication is enabled at the URL https://www.SITE.com/civicrm/dashboard?reset=1. As a result, the URL returns the header "Content-Length: 0":

HTTP/1.1 302 Moved Temporarily Date: Wed, 30 Apr 2014 14:38:04 GMT Server: Apache Expires: Sun, 19 Nov 1978 05:00:00 GMT Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0 Last-Modified: Wed, 30 Apr 2014 14:38:04 GMT ETag: "1398868684" Location: http://www.SITE.com/civicrm/dashboard?reset=1 Content-Length: 0 Content-Type: text/html
The output of this is indeed 1:

curl_setopt($ch, CURLOPT_RETURNTRANSFER, true );

However, the call to curl_exec() at the end of the function returns false, because of this authentication issue. This issue is mentioned here:

http://forums.devshed.com/php-development-5/curl-curlopt_returntransfer-300420.html

Why this happens only on this site I do not know.

I chose to simply hack the file CRM/Utils/System.php to get this site to work as expected.

As others seem to be affected, should I report this as a bug?

I think so. Turns out that the site I am working with, whereas now the Ubercart SSL module works fine and https://www.site.com/cart/checkout is secure and works, CiviCRM redirects https to http, including paid event pages. This is even though  Force Secure URLs (SSL) is set to Yes.

So my hack may not have solved the problem fully.

Just after posting that I had the problem, I found that the CIVICRM_UF_BASEURL setting in civicrm.settings.php was not the same as the cert's URL.  After adjusting that I was able to turn on SSL in civi. -Dave

After further investigation, I discovered that using Ubercart SSL (Drupal module) was overriding the CiviCRM SSL configuration to automatically apply SSL to specific pages.  So I replaced Ubercart SSL with Secure Pages module, and configured it to use SSL on all CiviCRM content (civicrm/*).  Works as expected now.

I have had success in the past with the "Secure Pages" module. Can you try that?