This log does not look to show a redirect changing protocols. it shows, what looks like, two parallel/subsequent requests to /users on https and http. the last request shown doesn't originate from the request before it and has no referer.
If relevant, check what is stored in the session in Auth.redirect; if the original request was for http - it's quite possible you're being redirected back to http since that's where you were before logging in. AD On Thursday, 21 November 2013 22:03:58 UTC+1, dtemes wrote: > > > We have just installed a self signed ssl cert on the apache server and > doing some tests with our app running over https. The very first issue is > that after login we are being redirected to http, and not https, here are > some apache logs: > > > xxx.xxx.com:443<http://www.google.com/url?q=http%3A%2F%2Fxxx.xxx.com%3A443&sa=D&sntz=1&usg=AFQjCNH-cIxUd0HJUR4j8i_f1JqgpSmUuQ>192.168.1.3 > - - [21/Nov/2013:12:45:24 -0800] "POST /users/login HTTP/1.1" > 302 596 > "https://xxx.xxx.com/users/login<https://www.google.com/url?q=https%3A%2F%2Fxxx.xxx.com%2Fusers%2Flogin&sa=D&sntz=1&usg=AFQjCNHLOWqoqK3JEhHkeVMbRjtUgNLOfQ>" > > "Moz > illa/5.0 (Windows NT 6.1; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0" > xxx.xxx.com:443<http://www.google.com/url?q=http%3A%2F%2Fxxx.xxx.com%3A443&sa=D&sntz=1&usg=AFQjCNH-cIxUd0HJUR4j8i_f1JqgpSmUuQ>192.168.1.3 > - - [21/Nov/2013:12:45:24 -0800] "GET /users HTTP/1.1" 302 468 " > https://xxx.xxx.com/users/login<https://www.google.com/url?q=https%3A%2F%2Fxxx.xxx.com%2Fusers%2Flogin&sa=D&sntz=1&usg=AFQjCNHLOWqoqK3JEhHkeVMbRjtUgNLOfQ>" > > "Mozilla/5. > 0 (Windows NT 6.1; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0" > xxx.xxx.com:80<http://www.google.com/url?q=http%3A%2F%2Fxxx.xxx.com%3A80&sa=D&sntz=1&usg=AFQjCNHUoTqur5PpY93mdReZ5OabIsz6jA>192.168.1.3 > - - [21/Nov/2013:12:45:24 -0800] "GET /users HTTP/1.1" 302 368 > "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:25.0) G > ecko/20100101 Firefox/25.0" > > > This is the auth config: > $this->Auth->authorize = 'Controller'; > $this->Auth->authenticate = array('Form' => array('fields' => > array('username' => 'email', 'password' => 'password'))); > > $this->Auth->loginRedirect = array('controller' => 'users', > 'action' => 'index'); > $this->Auth->autoRedirect = false; > > > We are currently running cake 2.4.0 > > > -- Like Us on FaceBook https://www.facebook.com/CakePHP Find us on Twitter http://twitter.com/CakePHP --- You received this message because you are subscribed to the Google Groups "CakePHP" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/cake-php. For more options, visit https://groups.google.com/groups/opt_out.
