Magento

Hello,

we have an load balancer, which I can access via a https address. the balancer, and some other servers behind, translate the URL to http://127.0.0.1:[port] and access a virtual machine with the Magento installation. If I enter the address http://127.0.0.1:[port] in Magentos secure and unsecure BaseURL Paths, I can access Magento via the https adress, but all Links(JS, CSS) are written with htpp:127.0.0.1:[port]. Apache Module mod_substitude is a possible solution, but it dont work very well together with mod_proxy… If I enter the https adress in Magento BaseURLs, I get a 302 Redirect Loop. Session Validation Settings are all set to No. So, what is the problem?

Hello,

i found the error: The loadbalancer terminates https connection, magento is accessed with http protocoll. BaseURL is an https address and secured pages should be used in frontend. Through th termination by the loadbalancer, the request is unsecure(http), but should be secure. So, Magento redirects to the secure BaseURL(https). But this https session is terminated by the loadbalancer again and translated to http. Same case, redirect again, and so on until Redirect Error.

I found a method in app/code/code/Mage/Core/Controller/Varien/Router/Standard.php: _checkShouldBeSecure($request, $path=’’), which causes the error and try to override this method with my own extension, but i dont succeed.

Is it possible to override it with my own extension? I dont want to source out all methods in this Class.

Hello,

the problem/solution is described in this post: How to extend Mage_Core_Model_App?

Greetings!

I realize this is an old post, but if you add this code before the `Mage::run...` line at the bottom of `index.php` Magento will not attempt to redirect secure connections that were handled by your load balancer.

I happen to be using Amazon EC2, which uses the X-Forwarded-Proto header, but the same method works for any header (eg, if you set your load balancer to add a “Magento-Secure” header, or whatnot, then you could check for `$_SERVER[’HTTP_MAGENTO_SECURE’]` below):

Thank you SO much!

This code here just saved my life!

nheinrichs - 20 January 2011 07:53 PM

/**
 * EC2's load balancer sets these for us so we know we're secure,
 *  preventing Magento from performing a redirect loop.
**/
if( isset($_SERVER['HTTP_X_FORWARDED_PROTO']) ) {
    $_SERVER['HTTPS'] = 'on';
    $_SERVER['SERVER_PORT'] = 443;
}

You should really be setting these values at Apache or Nginx config level if you can as it seems pointless doing it at code level like this.