Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-58318

https is forced, but no redirect to https URL is provided.

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.2, 3.3, 3.4
    • Fix Version/s: 3.4
    • Component/s: Usability
    • Labels:
    • Testing Instructions:
      Hide

      Add a self signed certificate to apache. debian hint: "sudo make-ssl-cert generate-default-snakeoil --force-overwrite".

      Change moodle wwwroot to https version

      Access the site via http - not https

      Verify you are redirected to the https front page and do not see an error.

      Try and access the login/token.php page via http. You should see an error and not be redirected.

      Show
      Add a self signed certificate to apache. debian hint: "sudo make-ssl-cert generate-default-snakeoil --force-overwrite". Change moodle wwwroot to https version Access the site via http - not https Verify you are redirected to the https front page and do not see an error. Try and access the login/token.php page via http. You should see an error and not be redirected.
    • Affected Branches:
      MOODLE_32_STABLE, MOODLE_33_STABLE, MOODLE_34_STABLE
    • Fixed Branches:
      MOODLE_34_STABLE
    • Pull from Repository:
    • Pull Master Branch:
      MDL-58318-master

      Description

      Accessing a site via http, if the admin didn't manually redirect that already, can result in a dead end error "For security reasons only https connections are allowed, sorry."

      PROBLEM:  The error page looks like this: 

       

       

      SOLUTION:  At very least, include a link to the actual https front page.  It could also redirect automatically after a few seconds.

       

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                1 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Fix Release Date:
                  13/Nov/17