14 votes
Accepted

How to force image URLs as HTTPS?

You can use file_url_transform_relative(): /** * Transforms an absolute URL of a local file to a relative URL. * * May be useful to prevent problems on multisite set-ups and prevent mixed * ...
4uk4's user avatar
  • 99.6k
11 votes

redirect whole site to HTTPS

RewriteCond %{HTTPS} !=on # This checks to make sure the connection is not already HTTPS RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] # This rule will redirect users from their original ...
rjkunde's user avatar
  • 211
6 votes
Accepted

Connection to AWS MySql server over SSL

Figured it out and required SSL via phpmyadmin admin interface for my users. There are my Drupal database params $databases = array ( 'default' => array ( 'default' => array ( ...
Danny Browne's user avatar
6 votes

How to correctly configure settings.php to use reverse proxy and ssl termination

This should work for both Drupal 7 and 8. It's actually the global.inc for one of my Aegir set-ups, which gets injected into all hosted sites' settings.php files. <?php # global settings.php /** ...
colan's user avatar
  • 2,169
4 votes

How to have a secure HTTPS login form?

Given the way things are heading on the internet now, and Google making statements about weighing HTTPS sites higher than HTTP in the past couple of months, you might as well make it totally HTTPS. ...
Kevin's user avatar
  • 27.8k
4 votes

Is there any way to force https:// to be used for assets and still be able to define a theme CSS files in its .info file?

For a Drupal 7 site using Cloudflare CDN and a Bootstrap theme, this worked for me: Set the base URL in your settings.php file, without including http:// or https://. $base_url = '//my.domain.name'; ...
bigO's user avatar
  • 41
3 votes
Accepted

redirect whole site to HTTPS

You might be interested in the htaccess module: Htaccess is a module which autogenerates a Drupal root htaccess file based on your settings. Drupal tries to provide a one size fits all ...
Neograph734's user avatar
  • 8,419
2 votes

Problem with SSL certificate

There are some known issues with Drupal 7.x in some server configurations particularly around PHP 5.6 and OpenSSL 0.9x due to changes in how PHP verifies SSL certificates. Acquia has some notes about ...
acrosman's user avatar
  • 2,728
2 votes

Do you really need SSL on local dev environments?

It depends on the site. Some third party tech, services, etc require SSL to be enabled and working for basic functionality. Meaning for those cases any/all development/staging environments would need ...
LittleCoding's user avatar
2 votes

Too many redirects error with https and domain access module

Just in case anyone stumbles upon this (or perhaps for my future self). The issue ultimately ended up being Cloudflare. If you use Cloudflare for any of your domains don't forget to include it in the ...
Tom's user avatar
  • 21
2 votes

How to force image URLs as HTTPS?

You could try altering your base_url by un-commenting the following line in settings.php and changing the http to https. /** * Public file base URL: * * An alternative base URL to be used for ...
No Sssweat's user avatar
  • 31.2k
2 votes

Problem with ssl, broken site

In Drupal 7 you could set the $base_url='https://example.com'; in /sites/default/settings.php. For Drupal 8 it looks like $base_url has been removed in favor of trusted domain patterns which are ...
ponies's user avatar
  • 542
1 vote

How to configure htaccess to redirect ALL traffic through https?

You could use something like this: RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L,NE]
Purdy's user avatar
  • 127
1 vote

Adding RewriteCode in https does not work for links other than base url

Adding these lines to the default .htaceess file worked for me # Force HTTPS across the Drupal site <IfModule mod_rewrite.c> RewriteEngine on RewriteCond %{HTTPS} off RewriteRule (.*) https://%{...
Razeem Ahmad's user avatar
1 vote

Problem with ssl, broken site

You can call the CSS, javascript, and other files using '//' as a prefix to the source. This renders the files for both http and https depending on how the page was rendered. <script src="//code....
TreyeDesigns's user avatar
1 vote
Accepted

Drush make: simplexml_load_file(): I/O warning : failed to load external entity "" Project.php:74

This workaround fixed my issue: In drush.inc if ($use_wget) { drush_shell_exec("wget --no-check-certificate -q --timeout=30 -O %s %s", $destination_tmp, $url); } else { drush_shell_exec("curl --...
Fabrizio Fab01 Sabato's user avatar
1 vote

Commerce Kickstart on secure server

Yes it should be that easy, Drupal doesn't tend to mind what protocol it's served under. I say "should" because who knows what contrib/custom modules you have that might be doing who knows what, but ...
Clive's user avatar
  • 167k
1 vote

Getting error 'The requested page could not be found' after https is enabled

The link to my content is lost So you enabled HTTPS and you can no longer see your Drupal website? It sounds like you have uploaded your Drupal installation in public_html and are now serving content ...
Neograph734's user avatar
  • 8,419
1 vote

Do you really need SSL on local dev environments?

Maybe? If you load something from HTTPS from a non HTTPS site, you might encounter cross domain or same origin errors. It depends on what you're building and how. If you need HTTPS locally, Acquia ...
rovr138's user avatar
  • 1,018
1 vote

Enable SSL for whole Drupal 8 site

Depending on how the RSS links are rendered, I would suggest calling them over with a protocol-relative URL such as: //domain.com/rss-feed.... This will force the information to be sent over based ...
TreyeDesigns's user avatar
1 vote

Force login through mysql

Sounds like you need to do the following: Set the securepages_enable to 0 in settings.php Open a MySQL Client, like HeidiSQL or SQL Pro Truncate the cache_ tables Reload local site in browser This ...
Kevin's user avatar
  • 27.8k
1 vote

SSL errors - .well-known

That folder is needed by LetsEncrypt and is nothing to do with Drupal. For some details elsewhere on the SO network see https://serverfault.com/questions/796745/letsencrypt-do-i-need-to-keep-well-...
George's user avatar
  • 558
1 vote

AddThis Icons Being Blocked on SSL/HTTPS Site

/admin/config/user-interface/addthis/advanced Service URL's and you can put https instead of http and problem is fixed!
Michael's user avatar
  • 225
1 vote

.htaccess https rewrite for single domain on multisite installation

First I would try using the [drupal]/sites/sites.php file to do something like this: $sites['example.co.uk'] = 'example.com'; $sites['example.com'] = 'example.com'; // for demonstration only Then ...
Dan Mantyla's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible