Finally tracked down the solution. The request.is_secure(); isn't looking
for the HTTP_X_FORWARDED_PROTOCOL to test for HTTPS so its always returning
that its not secure. To fix it I had to add the below to my settings.py
file.
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTOCOL', 'https')
Also I see that line in the deploy local_settings.py.template file.
On Friday, November 14, 2014 9:08:57 AM UTC-7, Josh B wrote:
>
> Thanks, Josh.
>
> I have tried with that set or left blank and I get the same thing. I have
> also removed the SSL config parameters and just use default ones and I
> still get the redirect. Looking through all of the Cartridge sites I have
> built this is the issue that has always alluded me.
>
> On Friday, November 14, 2014 8:22:13 AM UTC-7, Josh Cartmell wrote:
>>
>> I've had issues with redirects and SSL before if I put in the wrong
>> "Force host" which is a backend editable setting.
>>
>> On Fri, Nov 14, 2014 at 3:19 AM, Josh B <josh.ba...@wearetopsecret.com>
>> wrote:
>>
>>> I must be missing something, but the last few Nginx + Cartridge sites I
>>> have launched I have to https the whole the site. If I don't the sections I
>>> need SSL on just do a 302 redirect loop.
>>>
>>> Here are my settings:
>>>
>>> SSL_ENABLED = True
>>> SSL_FORCE_URL_PREFIXES = ('/shop/cart','/shop/checkout','/account',
>>> '/admin')
>>> SSL_FORCED_PREFIXES_ONLY = True
>>>
>>> I also enabled the SSL middleware.
>>>
>>> My Nginx config matches the one provided.
>>>
>>> Thoughts?
>>>
>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "Mezzanine Users" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to mezzanine-use...@googlegroups.com.
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>>
--
You received this message because you are subscribed to the Google Groups
"Mezzanine Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to mezzanine-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
