I'm struggling with Shared SSL on my drupal site. I've searched exhaustively and can't find anything truly helpful on drupal.org regarding this. I'm running drupal 5.1 on site5.com which offers Shared SSL.

I'm supposed to be able to access my pages securely at https://servername.site5.com/~username. This will bring me to my drupal homepage securely but any attempt to login or navigate to any other pages results in a 404 error. Even typing a direct url such as https://servername.site5.com/~username/testpage creates a 404 error.

I've tried to install the Securepages module but that causes errors and won't allow me to access any admin page etc. I had to manually remove the installation from the database and modules directory. I haven't seen instruction or been able to figure out how to configure or use it properly.

I've also tried to set up a "multi-site" with a subdomain secure.mysite.com and a seperate settings.php file changing the base url to the shared SSL url. I get the same problems.

Does anyone have or know where I can find clear instructions on using drupal with Shared SSL. I've seen others looking for answers and posts that say drupal can do it, but none that make it clear how.

All I really need is to secure one specific form on the site. Any instruction would be extremely helpful to me and probably others. Thanks in advance.

Comments

sleepingmonk’s picture

I found some help with this in the irc. Turns out that if I turn off clean urls I can access all pages through https:// .

With further testing I found that I can turn clean urls ON and still access any page through the address bar, as long as I type the full address with the ?q=, as if not using clean urls.

This alone may solve my problem of securing one page on my site that I link to with a direct link formatted with the ?q=. However it doesn't seem like this is a complete solution to the problem. Talking in #drupal-support a 4.7 user has no problems with or without clean urls.

I need someone more knowledgeable than me to tell me if this is a bug in 5.1 or is there some configuration I can change to fix what seems to be a mod_rewrite problem.

--
To Your Success!

notarealperson’s picture

Did you ever resolve this issue? I'm having the same problem. Thanks.

incaic’s picture

I'm also getting the same behavior ... have been looking around for an answer, but have not found one.

Did you find a solution?

incaic’s picture

Called my hosting company and they got it working.
They modified my httpd.conf file and moved Directory
outside of VirtualHost.

I'm not an expert on this, so take this as a hint at what
may need to be done and ask your hosting company's
customer service guy.

sleepingmonk’s picture

Hi again,

For the problem I name above, my solution was just to access the form I needed via "dirty" urls. (including the q=...).

I've recently realized that this probably isn't an issue with SSL or the secure pages module per se. It's really a problem with clean urls.

On a current project, I'm building a new site on a virtual host but the domain name is not yet pointed over from the old site. When I try to enable clean urls, I get errors, even though I know mod_rewrite is enabled and clean urls works when the domain name is present. It just doesn't work with the virtual host directory. i.e. http://ipaddress/~accountname

So for shared SSL, this is a problem because you're usually forced to use the virtual host directory as the url. Which, in my initial problem, was http://servername.site5.com/~accountname

I don't know enough about virtual hosts to come up with a work around for this. Maybe the clean urls module needs a patch? I don't know much about that either. Maybe it's just being confused by the '~' character in the url?

--
To Your Success!