#4120 (ok 4.0.9) SSL redirects to port 80

4.1.0
fixed
Marc Delisle
1
2014-08-14
2013-10-04
calvin
No

this bug is still here for version 3.5.8, version 4.0.7, and version 4.1.0-alpha

The login-redirect-to-port-80-for-https bug still exists.

Situation:

Login page where you input username and password
https://www.xxyyzz.com/pma/index.php

after trying to login by entering username and password and click "Go", it will be redirected to
https://www.xxyyzz.com:80/pma/index.php?token=35f452d16e0c197811a4c6fd8ac04083
(as you can see the domain suddenly have a ":80" attached)

and the page shows a "SSL connection error"

Discussion

1 2 3 4 > >> (Page 1 of 4)
  • calvin
    calvin
    2013-10-04

    xxyyzz.com is just for an example, My site is not really "xxyyzz.com"

     
  • calvin
    calvin
    2013-10-04

    setting
    $cfg['PmaAbsoluteUri'] ='https://www.xxyyzz.com/_p_m_a/'; fixed the problem, but it should auto detect instead of having us to set it manually, simply because the original domain is 'https://www.xxyyzz.com/_p_m_a/', by no means should it redirect to 'https://www.xxyyzz.com:80/_p_m_a/'

     
  • Marc Delisle
    Marc Delisle
    2013-10-12

    I tried with 4.1.0-alpha2 and could not reproduce your problem. I have no $cfg['PmaAbsoluteUri'] defined.

     
  • calvin
    calvin
    2013-10-12

    are you using https? We are not talking http here.

    And even if your 4.1.0-alpha2 works, the 3.5.8 still needs to fix, many thanks

     
  • Marc Delisle
    Marc Delisle
    2013-10-12

    Yes, I'm using https.

    About 3.5.8, according to http://www.phpmyadmin.net/home_page/support.php, 3.5.x is only support for security fixes.

    Moreover, it's my strong opinion that if such a bug existed in the wild, since 3.5.8, it would have been reported before.

     
  • calvin
    calvin
    2013-10-15

    Thanks Marc! Many many thanks for looking into it.

     
  • Marc Delisle
    Marc Delisle
    2013-10-15

    Bug 3538 is about the ForceSSL directive; is this your case?
    Bug 3704 is also about ForceSSL but the reporter did not answer the question asked by nijel.

     
  • calvin
    calvin
    2013-10-15

    none of these two are reported by me.

    yes, similar. I think I have made it quite clear in the topic. :) do you need anymore info?

     
  • Marc Delisle
    Marc Delisle
    2013-10-16

    Sorry, you did not mention the ForceSSL directive in your topic. Well, I just tried it with 4.1.0-alpha2 and cannot reproduce the problem.

    Note that in https://phpmyadmin.readthedocs.org/en/latest/config.html#cfg_ForceSSL we mention "In some setups (like separate SSL proxy or loadballancer) you might have to set $cfg['PmaAbsoluteUri'] for correct redirection." so this is probably your case.

     
1 2 3 4 > >> (Page 1 of 4)