WordPress.org

Make WordPress Core

Opened 4 years ago

Closed 4 years ago

Last modified 4 years ago

#39659 closed enhancement (duplicate)

Offloaded SSL Detection

Reported by: miraclebg Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: General Keywords:
Focuses: Cc:

Description

Currently Wordpress supports detection only by checking the HTTPS environment variable (on,1).

I would suggest also adding forwarded protocol headers - like ones coming from a SSL offloader (HaProxy for example) which would normally send in this case:

HTTP_X_FORWARDED_PROTO=https

It is currently impossible to do this otherwise unless manually editing the WordPress core.

I am attaching a screenshot of the proposed change i have to do every time manually.

Thank you!

Attachments (1)

Screen Shot 2017-01-21 at 14.16.39.png (86.1 KB) - added by miraclebg 4 years ago.
Proposed fix

Download all attachments as: .zip

Change History (3)

#1 @ocean90
4 years ago

  • Component changed from HTTP API to General
  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Status changed from new to closed

Hello miraclebg, welcome to Trac!

Thanks for your report, it's something that comes up often:

#15733
WordPress Installation behind reverse-proxy ssl redirect loop
#19654
Allow overload of is_ssl() via a filter
#25222
Detect https correctly when behind a proxy/loadbalancer
#31288
IS_SSL should check return true for SSL Terminated load balancing
#31439
is_ssl not compatible with server - option for filter or hook
#32354
is_ssl() does not work on cloud hosting
#33730
ssl is not detecting for cloudflare
#34298
Amazon LB SSL / HTTP_X_FORWARDED_PROTO
#34912
wp-admin/load-styles.php not serving multiple assets over HTTPS
#39659
Offloaded SSL Detection
#40710
Improvement ssl detection


Please take a look at #31288 which provides information on how to solve this for your environment.

#2 @miraclebg
4 years ago

Oh, sorry - i did look but no idea why i could not find these dups.

Note: See TracTickets for help on using tickets.