Hi Andrea,
Thanks for your reply.
But as you say if I make changes in $CFG->wwwroot = http://mydomain.id to
$CFG->wwwroot = https://mydomain.id , It will turn whole site into https and this really do not fulfill my requirement.
I want to apply HTTPS on selective pages, But Chrome blocked the css and the javascript files for those pages, as these are called through HTTP.
How can I call all the javascript and css files required for the page, in the moodle, seperately using HTTPS.
Thanks..
I don't think anyone is following what he is saying. I am running into the exact problem with my Moodle installations.
The affected portals are set to "HTTPS" logins only.
They are behind a load balancer so $CFG->sslproxy = 1; must be specified in the config file.
As a result of setting sslproxy=1 moodle expects the wwwroot to be https. If you aren't running an entire site as https you cannot do this so you have to apply a hack found by other users to bypass this check.
To bypass the check you have to comment out ~ lines 822-828 in wwwroot/lib/setuplib.php
// $CFG->sslproxy specifies if external SSL appliance is used
// (That is, the Moodle server uses http, with an external box translating everything to https).
if (empty($CFG->sslproxy)) {
if ($rurl['scheme'] === 'http' and $wwwroot['scheme'] === 'https') {
print_error('sslonlyaccess', 'error');
}
} /*else {
if ($wwwroot['scheme'] !== 'https') {
throw new coding_exception('Must use https address in wwwroot when ssl proxy enabled!');
}
$rurl['scheme'] = 'https'; // make moodle believe it runs on https, squid or something else it doing it
}
*/
If you google around for HTTPS login redirect, or login loop you will find other conversations / issues in the issue tracker.
The above fix combined with the sslproxy setting fixes the login loop problem for a setup behind a loadbalancer using SSL offloading.
Hi
I want my moodle site to not prompt certificate error(it has self-signed certificate). So, i have disabled ssl for this moodle site. But it still shows me the promt in IE (not in chrome though) even after changing the config.php file wwwroot from https://... to http:// .
Whereelse should I be changing settings in order for the prompt to disasppear?
Why not just get a real certificate? They are pretty cheap at https://www.ssls.com/
Or you might be able to get one free at https://www.startssl.com if your site meets their criteria for a free certificate.
