[Problem Resolution] "login_ssl_required" and sslRedirect

[Douglas]

Ah so there's likely your problem - it sounds like SNI termination: Cloudflare will handle the certificate, but by the time it gets to SMF, it's not actually using HTTPS between Cloudflare and your server so your server thinks it's running HTTP.

I forget which option you need to turn off but there's one of the new options in 2.1 that has been turned on to force HTTPS login.

I just ran against this (1.0.14 to 2.1 RC2 update).

NginX load balancer (SSL cert is NOT SNI'd), Apache 2.4x back ends...

I kept getting "login_ssl_required", regardless of any other previous suggestion I found on SMF, including the .htaccess trick.

If NginX is already handling redirecting non SSL traffic to SSL, you MUST turn OFF "force_ssl" in your SMF settings (set it to 0). More than likely, you will have to do this via phpMyAdmin or via a MySQL CLI interface.

Again, this isn't a request for support... just sharing some insights I've learned along the way.

[Illori]

I just ran against this (1.0.14 to 2.1 RC2 update).

I do hope that was meant to be 2.0.14 and not 1.0.14.

[Douglas]

Nope, Illori... definitely 1.0.14. Only reason why it was "safe" is because it was behind a pay wall. Trust me, I wasn't happy, either... but it's updated now.

[Gamcore]

How to fix "login_ssl_required" error on SMF?
Run this code in your PhpMyAdmin / mySQL

Code Select Expand

UPDATE `smf_settings` SET `value` = '0' WHERE `smf_settings`.`variable` = 'force_ssl';

good luck!