Skip to main content
Share Your Experience: Take the 2024 Developer Survey
17 votes

Magento's Secure/Unsecure Image Link - Link Securely for Secure Pages only

Use _secure attribute. Ex: <img src="{{media url="wysiwyg/infortis/ultimo/menu/featured2.jpg" _secure="true" }}" />
Rafael Ortega Bueno's user avatar
6 votes
Accepted

Magento 2: What Causes the "Failed to enable crypto" Error?

It sounds like Magento's severely tightened up their HTTPS on the repo.magento.com server. These settings are tight enough that applications that support HTTPS but use an older version of OpenSSL ...
Alana Storm's user avatar
  • 44.4k
6 votes

Magento 2 with Varnish sometimes does not redirect HTTP to HTTPS

The issue was the Pound was only listening to 443 (https) and all HTTP was going straight to Varnish. Magento was supposed to be redirecting but sometimes Varnish would just send the HTTP version. ...
YWSW's user avatar
  • 336
6 votes
Accepted

How to force https on magento 2?

to force HTTPS, change your base url to https:// for unsecure too: bin/magento setup:store-config:set --base-url="https://myshop.com/" --base-url-secure="https://myshop.com/" --use-...
MagenX's user avatar
  • 3,803
5 votes

Force HTTPS on all pages in the frontend, not just Checkout/Account

For anyone stumbling across this (like I did) Don't use htaccess. Under admin go Stores -> General -> Web and change -> Use Secure URLs on Storefront -> Yes and Use Secure URLs in Admin -&...
Andrew's user avatar
  • 59
5 votes
Accepted

remove unsecure content from modals-wrapper

It does come from vendor\magento\module-customer\view\frontend\web\template\authentication-popup.html. Since this is a knockout.js template file, you will have to delete your static content and then ...
Aaron Allen's user avatar
  • 9,009
4 votes

HTTPS everywhere - Magento 2

Your VirtualHost configuration is basically correct. As you alluded to yourself, you will need to set the unsecurebaseurl (and securebaseurl) to be https. Magento uses the unsecure urls for basically ...
Peter O'Callaghan's user avatar
4 votes

SSL Error - Invalid or self-signed certificate for non https configuration

I had the same problem with EI and Firefox but when I switched to Chrome all was ok. So I guess this could be browser incompatability.
Wicko's user avatar
  • 41
4 votes

Magento 2: What Causes the "Failed to enable crypto" Error?

I resolved by updating the OS X liip package http://php-osx.liip.ch you just need to run the one-line command on that page source: http://devdocs.magento.com/guides/v2.0/release-notes/tech_bull_tls-...
mrzhero's user avatar
  • 673
4 votes

HTTPS not working on Magento2 backend

Based on the this article I was able to resolve it. Check if the entry already exists. select * from core_config_data where path = 'web/secure/use_in_adminhtml'; If not insert the following ...
Michel Tol's user avatar
4 votes

form post - getURL secure (HTTPS / SSL)

You can do so by using the _secure parameter: <?php echo Mage::getUrl('productquestions/productquestions/saveanswers',array('product_questions_id'=>$id, '_secure' => true));?>
Raphael at Digital Pianism's user avatar
4 votes
Accepted

Why my magento-1 website is showing as not secure?

You are obviously using a self-signed certificate with the subject puppetkart.depoto.com and issued by puppetkart.depoto.com. This certificate is not trusted by the browser since it is not issued by a ...
Steffen Ullrich's user avatar
4 votes

Demac Canada Post Plugin - "Cannot connect to host"

Demac has posted their own solution here: https://www.demacmedia.com/important-new-patch-magento-canada-post-application/ I have not tested it, but do plan to install it later today (deployment on ...
Kalvin Klien's user avatar
4 votes

Magento 2.2.5: Admin login page redirect loop 301/302 after installing SSL and enabling HTTPS

Try the following query: SELECT * FROM `core_config_data` WHERE path = 'web/secure/use_in_adminhtml' ; if path web/secure/use_in_adminhtml has value of null Update the value to 1 using the ...
AbdulKarim's user avatar
3 votes
Accepted

Can't set "Use Secure URLs in Frontend"

Seems that no admin settings could be saved. I went into the Magento database and set core_config_data.web/secure/use_in_frontend to 1 core_config_data.web/secure/use_in_adminhtml to 1 This allowed ...
Daniel Flippance's user avatar
3 votes

Ubuntu 14.04 Apache + SSL server, how to configure Varnish

You need to use Apache as a reverse proxy doing the SSL termination because Varnish doesn't support SSL. Try this: Make sure proxy mod is enabled: sudo a2enmod proxy And in your Vhost <...
lloiacono's user avatar
  • 3,386
3 votes

Magento wrongly redirects https!

Had exactly the same issue, but on Nginx. Resolved by adding the following into the nginx domain .conf file. fastcgi_param HTTPS on;
elfling's user avatar
  • 768
3 votes

Apache proxy + Varnish + Magento (HTTPS not caching)

Problem solved. The problem wasn't my .vcl file or apache config. The problem was inside the module I use with my Magento sotre (CE 1.5.1). The module is Phoenix-media pagecache for MAgento (https://...
Timothy GERETS's user avatar
3 votes

HTTPS not working on Magento2 backend

I inserted the suggested SQL and I also had to add the following to nginx. SQL INSERT INTO core_config_data (scope,scope_id,path,value) VALUES ('default',0,'web/secure/use_in_adminhtml',1); nginx ...
david's user avatar
  • 131
3 votes

Magento 2 admin panel not working after ssl

You can try modifying core_config_data and removing the cache. Follow these steps: Open the database of your Magento store Find core_config_data. Use this SQL query: INSERTINTO core_config_data (...
Md. Ehsanul Haque Kanan's user avatar
3 votes

Magento2.3.2: url shows http instead of https

First Check status: select * from `core_config_data` WHERE `core_config_data`.`path` = "web/secure/use_in_frontend"; select * from `core_config_data` WHERE `core_config_data`.`path` = "...
matinict's user avatar
  • 1,559
2 votes

Force HTTPS on all pages in the frontend, not just Checkout/Account

I have tried the previous solutions and even though they seemed to work they locked me out of admin panel (don't completely understand the reason). To get into the admin panel again I had to get into ...
GiorgosK's user avatar
  • 231
2 votes

Ubuntu 14.04 Apache + SSL server, how to configure Varnish

Apache 2.2 as a reverse proxy didn't work for me. I use HAProxy for SSL Termination now. My network: Client (http / https) -> HAProxy (SSL termination) -> Varnish 4 (if client http then redirect to ...
Gediminas's user avatar
  • 448
2 votes

What actions are necessary for PayPal's announced certificate changes?

You can also check it on your server by running openssl s_client -connect api-3t.sandbox.paypal.com:443 -showcerts | egrep -wi "G5|return" In that output, you will want to note the presence of two ...
Stefan's user avatar
  • 1,507
2 votes

Is there a public status for https://repo.magento.com/

For those landing here looking for the Magento Composer Repo up-time status, it is located here - https://status.adobe.com/products/3350 Click on "Experience Cloud" in the menu and then on &...
Stuart Franke's user avatar
2 votes

Static block doesn't get cached correctly between SSL and non-SSL

I didn't end up finding a solution I'm happy with. I'm certain I'm missing something because otherwise mixed SSL and non-SSL environments wouldn't work. I settled on this solution for now: --- app/...
Michael Thessel's user avatar
2 votes

SSL website not fully secure due to ajax

Change <script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js"></script> to <script type="text/javascript" src="//ajax.googleapis.com/...
Kalpesh's user avatar
  • 2,325
2 votes

remove unsecure content from modals-wrapper

The thing is named authentication-popup in the layout xml. You can remove it with <referenceBlock name="authentication-popup" remove="true"/> in ../page_layout/1column.xml for example. But I'...
steros's user avatar
  • 1,622
2 votes

How to setup AWS Cloudfront for Magento 2

I figured out the issue, it was the URLs base_static_url and base_media_url I was following a tutorial and assumed that magento is very opinionated in terms of url and stuff, But the case is ...
diyoda_'s user avatar
  • 151
2 votes

magento2 : so many jquery & require.js error when activating ssl

You need to perform below actions Flush cache Check console if you are getting 404 error for files then deploy static content php bin/magento setup:static-content:deploy If still facing 404 error ...
satya prakash patel's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible