Magento secure checkout redirect loop

AndyCollen · Sep 30, 2014

Morning Magento experts,

I have run into a problem with the secure checkout in magento.

I have the site hosted with TSO Host and bought an ssl certificate off them over the weekend. They have installed it for me but when i enable use secure on front end and change the secure base url to https i get a redirect loop error when entering the checkout, if I disable it the checkout works fine although unsecure.

Any help would be greatly appreciated, i'm running out of hair !

Regards,
Andy

zigojacko · Sep 30, 2014

What version of Magento are you running?

Are you on an Apache server or an Nginx server?

AndyCollen · Sep 30, 2014

Hi Geoff,

Version 1.9.0.1 running on an Apache server.

zigojacko · Sep 30, 2014

First thing to check is the correct admin configuration at System > Configuration > Web...

yourdomain.com should be replaced with the domain that your Magento is installed at.

Use SID on Frontend only needs to be set to 'Yes' if your payment gateway relies on this (such as Sagepay) or any 3rd party extensions.

zigojacko · Sep 30, 2014

Then log onto your FTP and manually delete everything in var/cache/ and /var/sessions/.

Then please retest and see is that has resolved.

AndyCollen · Sep 30, 2014

Just to clarify put in http:// not https:// in the secure base url as in the image you attached.

zigojacko · Sep 30, 2014

Yes sorry, thanks for pointing that out, the secure URL should be https.

AndyCollen · Sep 30, 2014

No joy, still says "This website has a redirect loop" in the checkout.

zigojacko · Sep 30, 2014

Okay, thanks for update.

Are you able to access the Magento admin area on https URL's currently?

zigojacko · Sep 30, 2014

It would be recommended to clear your browser cache/cookies as well as var/cache/ and /var/sessions/ manually over FTP each time you try something for this process as well by the way.

AndyCollen · Sep 30, 2014

No i cannot access admin when it is set to use secure backend. I have to log into myphpadmin and change the database setting to use unsecure backend before i can get back into admin.

zigojacko · Sep 30, 2014

If all the above has not resolved, please could you share your store URL so I can see the problem before I advise on changing any code on your website.

AndyCollen · Sep 30, 2014

Can't post links yet, so search for Ditronics Electrical in google.
The site is not finished and has no products yet so if you want to test the checkout search for RD60.

zigojacko · Sep 30, 2014

Okay thanks.

First try adding the following code to the bottom of your Magento root .htaccess file:-

Code:

############################################
## Case sensitivity fix for Magento 1.6.2.0 and newer
SetEnvIf HTTPS On HTTPS=on

Afterwards, please force refresh your site, clear cache (site and browser), browser cookies and /var/sessions/ afterwards. I trust that you have disabled Magento cache for the moment whilst this is being debugged as well?

AndyCollen · Sep 30, 2014

No Geoff, that didn't fix it and yes i have the cache disabled while i have been working on the site.

zigojacko · Sep 30, 2014

Okay, remove that code from .htaccess if it didn't make a difference.

Please can you paste the entire contents of your .htaccess at pastebin so I can view?

Alternatively, I'm happy to FTP onto your server if you're happy to provide access (via PM).

AndyCollen · Sep 30, 2014

Setup a temp ftp account for you to use, pm sent with details.

zigojacko · Sep 30, 2014

Great, thanks.

Please enable logging in System > Configuration > Developer (down the bottom of the left hand menu).

dx3webs · Sep 30, 2014

if you get desperate we are happy to throw up a copy of the site to test on our servers.

AndyCollen · Sep 30, 2014

Logging enabled Geoff.

zigojacko · Sep 30, 2014

dx3webs said:
if you get desperate we are happy to throw up a copy of the site to test on our servers.

Might be worth taking up this offer actually @AndyCollen because the page loading on your site at the moment is so slow, I keep having to look at other projects and keep switching back to this.

Ideally, we need Magento admin access as well. But preferably just SSH out as a tarball and drop on a development server that is tuned to run Magento might be best and @dx3webs is kindly offering this. Will provide a quick way to identify the cause.

I'd strongly recommend investing in some decent website hosting for running Magento and running your store on the Ultimo theme is not going to do you any favours in the slightest either.

Thanks for enabling logging though, I'll check them now.

zigojacko · Sep 30, 2014

Okay, this seems to have sorted it...

Modified /lib/Zend/Controller/Request/Http.php.

Code:

public function getScheme()
    {
        //return ($this->getServer('HTTPS') == 'on') ? self::SCHEME_HTTPS : self::SCHEME_HTTP;
    return ($_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https') ? self::SCHEME_HTTPS : self::SCHEME_HTTP;
    }

Actually, HTTP_X_FORWARDED_PROTO isn't correct. It needs to be the server variable that your https is enabled on.

Who is your web host?

I'll revert the changes for a moment...

AndyCollen · Sep 30, 2014

Hosting is with TSOHost

I can give you access to magento admin if needed, i would happily take up @dx3webs offer if i knew how to SSH out as a tarball (i am out of my depth with that part)

zigojacko · Sep 30, 2014

The problem actually seems to be some sort of useless/funky server side configuration with TSOHost. They might have a load balancer in place that could be affecting this as well.

The site is really slow. The https pages are sporadically returning 500 internal server errors as well. I'm thinking that there are a number of issues going on here, mostly centred around hosting that is not even designed for Magento by the looks of it.

Are you on a dedicated server or shared (most likely judging performance)? Do you know what your php_memory_limit is on the server? This could be why getting lots of 500 errors.

Going to have to abandon this for the moment, I'm afraid.

AndyCollen · Sep 30, 2014

No problem Geoff, I really appreciate the time you have taken today to help me with this.

Andy

AndyCollen · Sep 30, 2014

Just a quick update.

Andy from @dx3webs installed the site on his test server and everything works fine with a significant boost in page load times, so the problem has been with Tsohost's configuration.

Thanks for all the help in getting to the bottom of this.

Faevilangel · Sep 30, 2014

IMHO tsohost are awesome for small sites (html, wordpress etc) but throw in Magento and they do tend to fall over as they aren't optimised for it and Magento is a beast which needs a lot more than shared hosting from TSO can offer, using someone like DX3 will be much better in the long run.

zigojacko · Oct 1, 2014

AndyCollen said:
Just a quick update.

Andy from @dx3webs installed the site on his test server and everything works fine with a significant boost in page load times, so the problem has been with Tsohost's configuration.

Thanks for all the help in getting to the bottom of this.

Aye, thought as much. Good work @dx3webs

Glad that's sorted...

Cookie Consent

Essential

Analytics

Marketing

Magento secure checkout redirect loop

Faevilangel