View Issue Details

This bug affects 1 person(s).
 256
IDProjectCategoryView StatusLast Update
16126Bug reportsSecuritypublic2020-05-06 16:22
Reporterymca Assigned Toollehar  
PrioritynoneSeverityminor 
Status closedResolutionwon't fix 
Summary16126: SSL not working the same in every browser
Description

So I have found something strange.
It's about the SSL.
Something different happens when I write my site name (without "http:// or https://") with my .htaccess user and password in every browser.
brave - OK (redirection to https works)
edge - OK (redirection to https works)
Firefox - first asks me to log to the "http" site then redirects me to the "https" address and asks me again to log and then its OK.
chrome - asks me to log to the "http" site again and again in a loop.

TagsNo tags attached.
Bug heat256
Complete LimeSurvey version number (& build)Version 4.1.15+200402
I will donate to the project if issue is resolvedNo
Browser
Database type & versionsame
Server OS (if known)
Webserver software & version (if known)
PHP Versionsame

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2020-04-13 09:42

developer   ~57088

my .htaccess user and password in every browser

Nit related to LimeSurvey

Else : don't let LS do the redirect ....

For example :

<VirtualHost *:80>
        ServerAdmin webmaster@example.org
        ServerName limesurvey.example.org
        DocumentRoot /www/limesurvey
        RedirectMatch 301 ^/((?!.well-known/acme-challenge/).*)$ https://limesurvey.example.org/$1
</VirtualHost>

Your webserver must do the redirect ...

ymca

ymca

2020-04-13 14:52

reporter   ~57099

"Your webserver must do the redirect ..."
OK, so from that I understand I need to turn "Force HTTPS:" "off" and I need to put the example you wrote in my ".htaccess" file, and change "https://limesurvey.example.org" to my site name?

DenisChenu

DenisChenu

2020-04-13 16:02

developer   ~57100

Force htts : : don't care but NOT off

In .htaccess

   RewriteCond %{HTTPS} off
   RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L]

Maybe (with mod_rewrite)

Some other example : https://duckduckgo.com/?t=ffab&q=htaccess+htts+forced

ymca

ymca

2020-04-13 23:50

reporter   ~57103

Thank you very much DenisChenu.
I have tried to do some things but they didn't work.
Also tried to do what this site told to do and it didn't work.
(Maybe I'm doing it wrong)
I've called my hosting company and they fixed it.

ollehar

ollehar

2020-04-14 10:49

administrator   ~57104

Since it's not related to LimeSurvey per se, please post any further questions on our forum. Thank you.

ymca

ymca

2020-05-06 16:22

reporter   ~57596

Got my hosting company to write the redirection and it works.
RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://sitename.com/$1 [R,L]

Issue History

Date Modified Username Field Change
2020-04-10 23:20 ymca New Issue
2020-04-13 09:42 DenisChenu Note Added: 57088
2020-04-13 14:52 ymca Note Added: 57099
2020-04-13 16:02 DenisChenu Note Added: 57100
2020-04-13 23:50 ymca Note Added: 57103
2020-04-14 10:49 ollehar Assigned To => ollehar
2020-04-14 10:49 ollehar Status new => closed
2020-04-14 10:49 ollehar Resolution open => won't fix
2020-04-14 10:49 ollehar Note Added: 57104
2020-05-06 16:22 ymca Note Added: 57596