https://bugzilla.wikimedia.org/show_bug.cgi?id=40679

--- Comment #19 from Krinkle <[email protected]> 2012-10-02 21:43:08 UTC ---
(In reply to comment #15)
> There seems to be two related issues. Here are reproduction steps:
> 
> 1) http resources when viewing a page with https:
> * using master from git
> * configure $wgServer to start with 'http:'. I'm using "http://localhost";
> * view any page over ssl: https://localhost/wiki/index.php/Main_Page
> 
> Result: Most of the css and js resources are loaded from http urls (Chrome
> refuses to load them, IE gives warnings, etc)
> 
> 2) Infinite redirect:
> * using master from git
> * configure $wgServer to start with 'http:'
> * configure $wgSecureLogin = true;
> * On any page, click the "Log in" link. The <a> points to an http:// url
> 
> Result: Because Special:UserLogin redirects to https if it detects it is being
> viewed over http, you get an infinite redirect, because the Location header
> points to an http:// url.

2 is a bug, yes. I wonder how that happens. Where does MediaWiki produce a
redirect to HTTPS if server includes http://? That should be impossible.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to