#12043: Incorrect redirect to http instead of https
------------------------------------------+---------------------------------
Reporter: [email protected] | Owner: nobody
Status: new | Milestone:
Component: Core framework | Version: 1.1
Resolution: | Keywords: redirect http https
Stage: Unreviewed | Has_patch: 0
Needs_docs: 0 | Needs_tests: 0
Needs_better_patch: 0 |
------------------------------------------+---------------------------------
Changes (by grahamd):
* needs_better_patch: => 0
* needs_tests: => 0
* needs_docs: => 0
Comment:
Those change sets aren't going to be most recent for is_secure(). This is
because for WSGI the code was since changed to correctly use
wsgi.url_scheme.
There is no issue with wsgi.url_scheme generation in mod_wsgi, so long as
Django code still checking that then should be fine.
One possibility for problems is that your Apache isn't handling HTTPS but
you are hosting it behind a front end server, such as nginx. WebFaction
for example does this. In that case, that HTTPS was used isn't known by
Apache as it only receives HTTP from front end. In this case, necessary
for front end web server to set a special HTTP header which is then
detected by Apache behind, which using certain directives in Apache can
detect that and set HTTPS in request environment which mod_wsgi will
detect and convert to appropriate value for wsgi.url_scheme.
So, are you 100 percent certain that your Apache is accepting HTTPS
requests in the first place.
Have ou tried dumping out WSGI environment before it is passed into Django
to see what it is passed. Use code examples in:
http://code.google.com/p/modwsgi/wiki/DebuggingTechniques#Tracking_Request_and_Response
to capture such information and post here.
--
Ticket URL: <http://code.djangoproject.com/ticket/12043#comment:1>
Django <http://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/django-updates?hl=en
-~----------~----~----~----~------~----~------~--~---
