Infinite loop when SSL is enabled in admin

[adamsymonds88]

Hi guys,
I recently installed a dedicated SSL on my site.
However when I enable it in CC admin, I get a "too many redirects" error in chrome and a similar message in other browsers.

If I disable SSL on CC admin and exchange "http" for "https" in the the address bar, the pages work fine.

CC is doing something, I just don't know what. Any help would be very much appreciated.

www.geekcore.co.uk is the site

Thanks again
Adam

[bsmither]

Can we see the contents of your .htaccess file in the main folder of your store?

[adamsymonds88]

## File Security

<FilesMatch ".(htaccess)$">

 Order Allow,Deny

 Deny from all

</FilesMatch>

 

#### Apache directory listing rules ####

DirectoryIndex index.php index.htm index.html

IndexIgnore *

 

#### Rewrite rules for SEO functionality ####

 

<IfModule mod_rewrite.c>

  RewriteEngine On

 

  ######## START v4 SEO URL BACKWARD COMPATIBILITY ########

  RewriteCond %{QUERY_STRING} (.*)$

  RewriteCond %{REQUEST_FILENAME} !-f

  RewriteRule cat_([0-9]+)(.[a-z]{3,4})?(.*)$ index.php?_a=category&cat_id=$1&%1 [NC]

 

  RewriteCond %{QUERY_STRING} (.*)$

  RewriteCond %{REQUEST_FILENAME} !-f

  RewriteRule prod_([0-9]+)(.[a-z]{3,4})?$ index.php?_a=product&product_id=$1&%1 [NC]

 

  RewriteCond %{QUERY_STRING} (.*)$

  RewriteCond %{REQUEST_FILENAME} !-f

  RewriteRule info_([0-9]+)(.[a-z]{3,4})?$ index.php?_a=document&doc_id=$1&%1 [NC]

 

  RewriteCond %{QUERY_STRING} (.*)$

  RewriteCond %{REQUEST_FILENAME} !-f

  RewriteRule tell_([0-9]+)(.[a-z]{3,4})?$ index.php?_a=product&product_id=$1&%1 [NC]

 

  RewriteCond %{QUERY_STRING} (.*)$

  RewriteCond %{REQUEST_FILENAME} !-f

  RewriteRule _saleItems(.[a-z]+)?(?.*)?$ index.php?_a=saleitems&%1 [NC,L]

  ######## END v4 SEO URL BACKWARD COMPATIBILITY ########

 

  RewriteCond %{REQUEST_FILENAME} !-f

  RewriteCond %{REQUEST_FILENAME} !-d

  RewriteCond %{REQUEST_URI} !=/favicon.ico

  RewriteRule ^(.*).html?$ index.php?seo_path=$1 [L,QSA]

</IfModule>

[bsmither]

Ok, there is nothing wrong in the .htaccess file.

 

And you can still get into the admin section?

 

Do the settings in the admin Store Settings, SSL tab look correct?

 

Also, read this and determine if it applies:

http://forums.cubecart.com/topic/47334-resolved-chrome-this-page-has-a-redirect-loop/

[adamsymonds88]

Hi There,

I can still get into the admin section. Although it doesn't automatically forward to an SSL version, it's unsecured.
However if I manually change the URL to "https", it works fine.

The settings in the SSL tab are definitely correct.

Best Wishes

[adamsymonds88]

These are my SSL settings.
Let me know if you think they're correct or not.
Thanks again.

[bsmither]

Also, read this and determine if it applies:

http://forums.cubecart.com/topic/47334-resolved-chrome-this-page-has-a-redirect-loop/

[adamsymonds88]

I think it's something to do with the way when SSL is enabled, CC appends the URL with "&PHPSESSID=3e7cda9bf23fc15d982705a96c7afb7a"
If I remove this (when SSL is disabled in admin) the link works fine. Obviously if I do this with SSL enabled, it re-appends the link automatically.
How do I stop it from doing this?

[Dirty Butter]

Did you read to the end of the post Bsmither suggested?

 

In case you didn't, try synchronizing your computer clock, even if it looks like it doesn't need it. Assuming you are on a Windows computer, click on the time in the right hand corner, then Change Date and Time Settings, the Internet Time tab, Change Settings, Update now.

 

Then reboot your browser and make sure it has cleared cache. Then clear cache from within CC Admin.

[bsmither]

"CC appends the URL with "&PHPSESSID={hash}"

 

I think this not a specific problem with CubeCart, but rather one where PHP itself will append this if the browser you are using is finicky with cookies. Either the browser has security settings too stringent, or you have a cookie-mangler add-on somewhere, or your firewall (ZoneAlarm?) is interfering, etc.

 

There are php.ini config file settings that can be set to anticipate finicky browsers.

 

But I could be wrong about this.

[adamsymonds88]

Thanks Dirty Butter, i'll give that a try. 

Right now i'm on a Mac, fully updated, no firewall software using standard, latest versions of Chrome and Firefox.

I just can't fathom it.

Thanks again for all the ideas up to now, really appreciated.

[adamsymonds88]

Restarting and syncing the clock didn't do anything. Same issues on Firefox, Chrome and Safari. Unable to test IE at present.

[bsmither]

Try to bring the customer support of your hosting provider into the conversation.