phpBB 3 over SSL

Temporary forum to obtain support while phpBB.com is offline.
Please use the support forum on phpBB.com
Forum rules
Temporary forum to obtain support while phpBB.com is offline.
Please use the support forum on phpBB.com
Locked
Joerg72
Registered User
Posts: 3
Joined: Mon Feb 09, 2009 1:18 pm

phpBB 3 over SSL

Post by Joerg72 »

Reposted @ http://www.phpbb.com/community/viewtopi ... &t=1437445
Please post there


Hello,
I can't seem to be able to figure out how to set up phpBB 3 over SSL. Specifically I have problems staying logged in, it is possible to perform some actions while logged in (read profile, view forum) but not others (administrate forum, post). Trying to administrate the forum asks me to re-authenticate, then tells me I am not authorised and loggs me out. All the while the site keeps the correct SSL URL, so it does not seem to be a problem with the cookie domain. My situation is this:
Non-SSL URL: http://mydomain.com/path
SSL URL: https://ssl.secure.com/mydomain.com/path (this is an SSL proxy provided by my host, the root directory of my domain is in the path /mydomain.com/ of that server)
.htaccess redirects Non-SSL users to SSL.

I have set the following parameters:
cookie_domain ssl.secure.com
cookie_path /mydomain.com
cookie_secure 1
server_name ssl.secure.com
server_port 443
server_protocol https://
and enabled "Overwrite server settings" in the ACP.

Cache has been cleared and all cookies on my browser deleted. The forum is a plain phpBB 3 install without any modifications.

Can anyone help me out?

Edit: All my cookies are set with (note the dot)
Domain: .ssl.secure.com
Path: /mydomain.com
but this is probably correct.
Last edited by Joerg72 on Wed Feb 11, 2009 8:19 am, edited 1 time in total.

Joerg72
Registered User
Posts: 3
Joined: Mon Feb 09, 2009 1:18 pm

Re: phpBB 3 over SSL

Post by Joerg72 »

Some more information: Setting
cookie_path /
cookie_domain (blank)
does not help. However, this information seems to be cached somewhere outside of /cache/, because the style cookie still contains this information (the other ones don't). The script path is the path how it appears on the website, setting it to how it appears in the FTP does not seem to help.

Other examples of what goes wrong: Registering fails, claiming I entered the wrong CAPTCHA. I can not send PMs. The moderator control panel is available, however no action can be executed.

Joerg72
Registered User
Posts: 3
Joined: Mon Feb 09, 2009 1:18 pm

Re: phpBB 3 over SSL

Post by Joerg72 »


Locked