I have Secure Pages installed on Drupal 6.10 on Ubuntu 9.04. I have an SSL certificate issued by GoDaddy installed, and I am pretty sure I have the default-ssl file correctly configured. I cannot get the Enable / Disable radio buttons on the Secure Pages configuration page to be enabled. If I click on the "click here", I get a 404 error. I really need SSL and Secure Pages, so any help will be much appreciated. Thanks.

Comments

kpm’s picture

I am having the same problem. But I'm using a Linode VPN and a self signed certificate...
There is a series of posts on the Ubercart website (http://www.ubercart.org/forum/support/9574/two_show_stoppers) that seems to point to this issue being an SSL server configuration issue... but I have yet to figure it out... I can only enable Secure Pages if I disable clean urls, which I simply cannot do... But I'm at a loss finding documents that may point me in the proper direction to find out where my configuration has gone wrong. I have a phpMyAdmin site up on the same server using SSL without issue, I can navigate to the root page with https://... but the second I click a link and a clean url is used on a drupal site, I get a 404 error... I was hoping this module, Secure Pages, would help, but I just can't get the thing to enable... *sigh*.

profjk’s picture

**Subscribing**

gordon’s picture

Basically this is not a problem with secure pages. This is a problem with the configuration of your web server and not serving SSL Pages.

Basically before you enable secure pages you need to make sure SSL is working. So you should be able to get to https://www.example.com/node or http://www.example.com/node and they will both work and they will be both exactly the same.

If you want to tell me what web server you are running I might be able to help.

kpm’s picture

Hi Gordon,

The server is a standard LAMP set up. Running on an Ubuntu 8.10 Linode VPN.

Apache/2.2.9 (Ubuntu) PHP/5.2.6-2ubuntu4.1 with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g

Thanks for the help!

gordon’s picture

This doesn't really tell me any more.

Basically if you can access your site via https ie https://www.example.com then you will be able to start secure pages.

If you can't access your site via https then you need to configure your web server.

Gordon.

kpm’s picture

Without enabling the Clean URLs module on the Drupal site, SSL works. I can navigate to https://www.example.com or https://www.example.com/?q=admin.
However, with the Secure Pages module enabled, I am then unable to enable Clean URLs. After disabling Secure Pages, I can then enable Clean URLs.
With Clean URLs enabled and Secure Pages disabled, I can navigate to https://www.example.com but not to any specific page such as https://www.example.com/admin.
I set up the SSL cert as a wild card, so https://www.example.com/ or https://secure.example.com/ etc, works, but https://example.com would result in a page not found error... not sure if that has anything to do with it, I would think not since I suspect most certs our there are wild cards...

Thanks

kpm’s picture

Title: Cannot Enable Secure Pages » Solved - stupid human error...

In the ssl conf file for my secure site, I had not changed the directory directive from "AllowOverride None" to "AllowOverride All"
Now all seems fine.

Thanks

gordon’s picture

Status: Active » Fixed
jacobson’s picture

Awesome. This was my problem too. Thanks!

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

5t4rdu5t’s picture

Thanks a lot guys! You rock... Would have spent who knows how many hours or days looking for a solution! They should link to this post where they say "make sure you Drupal installation has been configured to support SSL access" in securepages module.

mpaler’s picture

@kpm Dumb question...where is the "ssl conf" file?

answer. for those using a default ubuntu 9.04 install, you'd edit the directory directive in /etc/apache2/sites-available/default-ssl

greggles’s picture

Title: Solved - stupid human error... » Cannot Enable Secure Pages (on Mercury, or with default allowoverride settings)

Better title to help other people find this.