authentication over https not working

[Ricardo Tangali]

Hello I have a migrated project from 7.7 to 10.2 and it seems to have a problem with login over https.

I followed documentation on https://www.onehippo.org/10/library/concepts/security/hst-2-authentication-and-authorization-support.html

The login used to work on the 7.7 implementation.

With the http scheme it does work.

For testing locally I've set up apache like mentioned in the documentation (httpd configured for ssl support).

Once I go to https://mywebsite.com/login/form I wil get the login screen. But when I login, it fails. It will redirect to http://mywebsite.com/login/resource which it wont find since it's http.

Does anyone recognize this problem?

[Ard Schrijvers]

Hey Ricardo,

can you compare with a plain vanilla archetype created project? In
there, you'll see below
hst:hst/hst:configurations/hst:default/hst:sitemap a 'login' sitemap
entry. This one is set to 'https'. Can you check you also have this in
your upgraded project

HTH,

Regards Ard

> --
> Hippo Community Group: The place for all discussions and announcements about
> Hippo CMS (and HST, repository etc. etc.)
>
> To post to this group, send email to hippo-c...@googlegroups.com
> RSS:
> https://groups.google.com/group/hippo-community/feed/rss_v2_0_msgs.xml?num=50
> ---
> You received this message because you are subscribed to the Google Groups
> "Hippo Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to hippo-communi...@googlegroups.com.
> Visit this group at https://groups.google.com/group/hippo-community.
> For more options, visit https://groups.google.com/d/optout.



--
Hippo Netherlands, Oosteinde 11, 1017 WT Amsterdam, Netherlands
Hippo USA, Inc. 71 Summer Street, 2nd Floor Boston, MA 02110, United
states of America.

US +1 877 414 4776 (toll free)
Europe +31(0)20 522 4466
www.onehippo.com

[Ricardo Tangali]

Hey Ard,

yes I have this on https. the 'login' sitemapitem is the same as a fresh 10.2 installation

Op dinsdag 25 oktober 2016 10:31:02 UTC+2 schreef a.schrijvers:

[Ard Schrijvers]

Hey Ricardo,

On Tue, Oct 25, 2016 at 12:31 PM, Ricardo Tangali
<ricardo...@incentro.com> wrote:
> Hey Ard,
>
> yes I have this on https. the 'login' sitemapitem is the same as a fresh
> 10.2 installation

I recommend to compare further with a plain vanilla archetype created
project. In there it works out of the box over https

HTH,

Regards Ard