Author Topic: https not setup on this machine (Read 5878 times)

lcdweb · April 03, 2009, 10:33:33 am

I'm getting the following message when accessing the Administer CiviCRM page:

Sorry. A non-recoverable error has occurred.
HTTPS is not set up on this machine

SSL is setup on the box, and the redirect to https is turned on. https is definitely working. I can manually change the civicrm home page to https and then navigate to the administer civicrm page with no problem. It's just the mechanism that checks to see if https is available that appears to be throwing the false-error.

Where is that script located, and how does it run a check?

lcdweb · April 03, 2009, 11:36:59 am

I worked around the problem by commenting out lines 786-795 (in v2.1.6) in CRM/Utils/System.php -- that's the chunk that checks if https is available.

Dave Greenberg · April 03, 2009, 12:52:57 pm

Is it possible to see if this hack is still needed using the latest release (2.2.2) on this machine? Would be good to debug the cause and fix it if this is a general problem that others might hit.

lcdweb · April 03, 2009, 02:30:02 pm

yeah, lobo already made me promise to find the root problem.
I needed an immediate fix, but will look into it further to find out why the check mechanism didn't recognize valid https.
-b

jgowans · April 22, 2009, 10:39:17 am

I'm having the same issue, though only when the link to the CiviCRM page (event or donation) is in a content item. If it's a menu item, you can force SSL at that level (Joomla, not sure about Drupal). A temp work around is to forces SSL via the global configuration (again, Joomla), but that causes IE users to always see the "this page contains secure and non-secure items" pop up. Looked at the system.php file but am scared to touch it until there's a clear fix.

lcdweb · April 22, 2009, 01:03:20 pm

can check and see if your ssl cert is installed for both: www.domain.com AND domain.com?
i think the check mechanism requires both.

jgowans · April 22, 2009, 01:44:02 pm

Contacted the host (hostgator) and they indicated that the SSL is good for both 'www' and without it. I set .htaccess to rewrite and force 'www' though previously, mainly to avoid any type of issue related to the 'www'. Redirect worked fine prior to upgrade to 2.2.2 (was on 2.1).

jalama · April 23, 2009, 11:59:01 am

same here, having the error on 2.2.2, "www" or not. Odd thing is if I go to https://www.example.com and then go back to the contribution page I can add a contribution.

commenting out lines starting at 831 in System.php got around it

Donald Lobo · April 23, 2009, 08:28:12 pm

not sure i understand what is happening and why. Maybe we can address/debug this at the developer camp next week

thanx

lobo

jgowans · April 24, 2009, 03:17:47 pm

Thought I'd try to comment out from line 831 to 838 of System.php also. Set force SSL to 'administrator only' in config (forced it in previous reply as a workaround). Commenting out the code seemed to do the trick, only tested in IE and Firefox. Just FYI.

genkml · April 27, 2009, 12:13:55 am

I have just upgraded from civiCRM 2.1.0 to 2.2.2
After the upgrade, any access to pages utilising CiviContribute generates the error "https not setup on this machine" as reported in this thread. Prior to my upgrade, I didn't have this problem, which means my SSL is setup properly on my site.

I commented out line 831 to 838 of System.php, but leave Force SSL to 'none" in Joomla. I understand it's a temporary solution, but it seemed to work for me.... for now

lcdweb · April 28, 2009, 02:11:50 pm

My initial problem was a result of the ssl cert setup for www. but not the root domain. The Civi check mechanism looks for both, and yields an error on the admin page (not in the frontend pages, which is good).

If that's the only cause of the problem as discussed in this thread, I think the check mechanism should stay as is. The ssl *should* be installed for both the root and www form -- yielding an error can help the admin troubleshoot.

However, maybe instead of an error page, there can be an error block and non-secure access to the administer civicrm page, as the admin would need to access that page to turn ssl off or perform any other function. And the error msg could include text letting the admin know that the error could be the result of the ssl not installed to both domains.

genkml · April 28, 2009, 05:18:00 pm

Looks like my problem is related to the post by lcdweb. The ssl certificate I obtained, were issued for a single, fully-qualified domain name, for example: www.anydomain.com. The ssl certificate does not work for the sub domain *.anydomain.com, or even anydomain.com without www, hence causing the check mechanism to fail. Please note it is possible to buy ssl certificate that works for anydomain.com, without the www. This is confirmed with Equifax, who issued my ssl certificate.

There are a couple of points I would like to make:
1. SSL certificate can be purchased that works for a single domain or for domain+all subdomains. Obviously the price is different
2. Hostmonster, the web hosting I used, only support SSL certificate on the root domain, which is the www.anydomain.com in the above example, if it's a shared hosting. Upgrade to dedicated hosting will allow ssl certificate installed in the main domain and subdomain, but the cost is going to be significantly more.

Based on the above, I suggest the check should be done on the fully-qualified domain name only. If a site is using www.anydomain.com, then the check should be just that. A site that's using anydomain.com without www, or sub domain such as subdomain.anydomain.com should be checked against each particular domain name only respectively. I suspect this was how the https check mechanism prior to 2.2.2?

TimberlineTom · May 04, 2009, 08:35:31 pm

I just wanted to add my feedback on this discussion. I also am with Bluehost and bought an SSL certificate from them today. The certificate is configured by default to work with and without "www" even though I do redirect everything to "www" due to problems with previous versions of CiviCRM. I do not force SSL in Joomla, only in CiviCRM. Commenting out line 831 - 838 of System.php fixed the problem for me also.

I can't give you more information to fix it, I'm not smart enough to be a programmer, I only understand enough to follow directions and keep my friends and non-profits working. But I know more information is always helpful for the smart guys.

Is there a tracking number to watch for this issue to know if it's fixed in the next version or if we have to workaround again?

Thanks,
TimberlineTom

Dave Greenberg · May 04, 2009, 10:33:04 pm

Issue filed here:

http://issues.civicrm.org/jira/browse/CRM-4447

CiviCRM Community Forums (archive)

News:

Author Topic: https not setup on this machine (Read 5878 times)

lcdweb

https not setup on this machine

lcdweb

Re: https not setup on this machine

Dave Greenberg

Re: https not setup on this machine

lcdweb

Re: https not setup on this machine

jgowans

Re: https not setup on this machine

lcdweb

Re: https not setup on this machine

jgowans

Re: https not setup on this machine

jalama

Re: https not setup on this machine

Donald Lobo

Re: https not setup on this machine

jgowans

Re: https not setup on this machine

genkml

Re: https not setup on this machine

lcdweb

Re: https not setup on this machine

genkml

Re: https not setup on this machine

TimberlineTom

Re: https not setup on this machine

Dave Greenberg

Re: https not setup on this machine