Anmeldung bei Wordpress Admin mit SSL-beendetem Load Balancer

Question

Anmeldung bei Wordpress Admin mit SSL-beendetem Load Balancer

- 4
- 2611 2017-04-02
nichtmöglich
Ausführen von Wordpress 4.7.3mit einem HAProxy-Frontend (Version 1.7.2) und Apache 2.4.10mit PHP 5.6-Backend.

Diesist alles auch unter Debian 8.7.

X-Forwarded-For und X-Forwarded-Proto werden von HAProxy korrekteingestellt.

Das Problem,dasich habe,ist,wennich SSL auf dem HAProxy-Frontendbeendet habe (im http-Modus) undmichbei Wordpress Admin anmelde,erhalteich den Fehler

Leider dürfen Sienicht auf diese Seite zugreifen.

Ich habe die Schritte von hier versucht Das Problem wurdenichtbehoben.

Am Endemeiner wp-config.php habeich

define('FORCE_SSL_ADMIN', true); // in some setups HTTP_X_FORWARDED_PROTO might contain // a comma-separated list e.g. http,https // so check for https existence if (strpos($_SERVER['HTTP_X_FORWARDED_PROTO'], 'https') !== false) $_SERVER['HTTPS']='on';

Ich habeeine Neuinstallation von Wordpress versucht (importierteeine Clientseiteeinesfrüheren Wordpressfür den Frühjahrsputz,aber das hat das Problem auchnichtbehoben).
Running Wordpress 4.7.3 with a HAProxy (version 1.7.2) frontend and Apache 2.4.10 with PHP 5.6 backend.

This is all under Debian 8.7 as well.

X-Forwarded-For and X-Forwarded-Proto are set correctly by HAProxy.

The issue I'm having is when I have SSL terminated on the HAProxy frontend (running http mode) and login to Wordpress Admin I get the error

Sorry, you are not allowed to access this page.

I tried the steps from here but they didn't fix the issue.

At the bottom of my wp-config.php I have

define('FORCE_SSL_ADMIN', true); // in some setups HTTP_X_FORWARDED_PROTO might contain // a comma-separated list e.g. http,https // so check for https existence if (strpos($_SERVER['HTTP_X_FORWARDED_PROTO'], 'https') !== false) $_SERVER['HTTPS']='on';

I tried a clean install of Wordpress (was importing a clients side of an earlier Wordpress for spring cleaning, but that didn't fix the issue either).
admin ssl
- Quelle
- jtl

1 Antworten

Stimmen

jtl · Answer 1 · 2017-04-13

5

2017-04-13

Ich habegerade das Problem herausgefunden.

Siemüssen die HTTPS/SSL-Einstellungen hinzufügen,bevor require_once(ABSPATH . 'wp-settings.php');in Ihrer wp-config.php

Der relevante Teil Ihrer wp-config.php sollte also so aussehen.

 define( 'FORCE_SSL_ADMIN', true );

// in some setups HTTP_X_FORWARDED_PROTO might contain
// a comma-separated list e.g. http,https
// so check for https existence
if( false !== strpos( $_SERVER['HTTP_X_FORWARDED_PROTO'], 'https' ) ) {
    $_SERVER['HTTPS'] = 'on';
}

/** Sets up WordPress vars and included files. */
require_once( ABSPATH . 'wp-settings.php' );

I just figured out the issue.

You need to add the HTTPS/SSL settings before require_once(ABSPATH . 'wp-settings.php'); in your wp-config.php

So the relevant part of your wp-config.php should look like this.

define( 'FORCE_SSL_ADMIN', true );

// in some setups HTTP_X_FORWARDED_PROTO might contain
// a comma-separated list e.g. http,https
// so check for https existence
if( false !== strpos( $_SERVER['HTTP_X_FORWARDED_PROTO'], 'https' ) ) {
    $_SERVER['HTTPS'] = 'on';
}

/** Sets up WordPress vars and included files. */
require_once( ABSPATH . 'wp-settings.php' );

Quelle
jtl

Hinzufügen des Codes über require_once (ABSPATH. 'Wp-settings.php');ist sehr wichtig,sonstfunktioniertesnicht

Adding the the code above the require_once( ABSPATH . 'wp-settings.php' ); is very important or else it will not work
- 1
- 2017-12-05
- error2007s
Vielen Dankfür das Teilen. Dies sollte der offiziellen Dokumentation hinzugefügt werden: https://codex.wordpress.org/Administration_Over_SSL#Using_a_Reverse_Proxy

thanks for sharing, this should be added to the official documentation: https://codex.wordpress.org/Administration_Over_SSL#Using_a_Reverse_Proxy
- 0
- 2017-12-21
- baptx