# Permanent SSL address

**URL:** <https://forum.oxid-esales.com/t/permanent-ssl-address/94769>\
**Category:** English forums\
**Tags:** oxid6, installation-configuration\
**Created:** [January 31, 2019, 10:17am UTC](https://forum.oxid-esales.com/t/permanent-ssl-address/94769 "2019-01-31T10:17:34Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![walldemar](https://forum.oxid-esales.com/user_avatar/forum.oxid-esales.com/walldemar/32/261_2.png) [@walldemar](https://forum.oxid-esales.com/u/walldemar)\
**Post date:** [January 31, 2019, 10:17am UTC](https://forum.oxid-esales.com/t/permanent-ssl-address/94769/1 "2019-01-31T10:17:34Z")

</div>

Hello for all! 🙂

**[OXID 6.1.1 EE]**  
I have small problem with SSL settings and redirections…  
My target setting is, to have working OXID shop ONLY on https. Even if i will write address [http://www.mydomain.pl](http://www.mydomain.pl), app/server should redirect me to https://…

And now we have few cases:

**Case 1 - starndard**  
$this-\>sShopURL = **'http** ://www.mydomain.pl’;  
$this-\>sSSLShopURL= ‘ **https** ://www.mydomain.pl’;  
$this-\>sAdminSSLURL= ‘ **https** ://www.mydomain.pl/admin’;  
$this-\>blForceSessionStart = **false** ;  
**Result:**

- OXID does not provide me all https addresses.
- Page with “http” can be opened but with errors to extenrnal links to google fonts or icons, etc.  
 ![error-icon](https://forum.oxid-esales.com/uploads/default/original/2X/c/c8c9d33dda7e1e2cfec7e61719a37d3ce5c55ed1.png)  
Example of error in browser console:  
_Access to font at ‘[https://www.mydomain.pl/out/xxx/src/css/fonts/fontawesome-webfont.ttf?v=4.7.0](https://www.mydomain.pl/out/xxx/src/css/fonts/fontawesome-webfont.ttf?v=4.7.0)’ from origin ‘[http://www.mydomain.pl](http://www.mydomain.pl)’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource._

**Case 2**  
$this-\>sShopURL = ‘ **https** ://www.mydomain.pl’;  
$this-\>sSSLShopURL= ‘ **https** ://www.mydomain.pl’;  
$this-\>sAdminSSLURL= ‘ **https** ://www.mydomain.pl/admin’;  
$this-\>blForceSessionStart = **false** ;  
**Result:**

- It works almost ok but user can still write in browser [http://www.mydomain.pl](http://www.mydomain.pl). Page can be opened but with errors to extenrnal links to google fonts or icons, etc.
- In addition i have bug with “white page” redirection while logout button from article view which have set visibility rights in admin panel ({Article}\>Rights\>Assign User Groups) - i found workaround for this issue by set “sSSLShopURL” to null.  
[https://bugs.oxid-esales.com/view.php?id=6946](https://bugs.oxid-esales.com/view.php?id=6946)

**Case 3**  
**Set force redirection on server (apache / in virtualhost).**  
$this-\>sShopURL = ‘ **https** ://www.mydomain.pl’;  
$this-\>sSSLShopURL= **null** ;  
$this-\>sAdminSSLURL= **null** ;  
$this-\>blForceSessionStart = **false** ;  
**Result:**

- It works in 99,9%.
- But some modules like “CleverReach Connector” require setting like: ‘sSSLShopURL’. ☹

**Any suggestion how to find right way to fix it?**

---

<div class="post-metadata">

**Author:** ![fthielen](https://forum.oxid-esales.com/letter_avatar_proxy/v4/letter/f/3d9bf3/32.png) [@fthielen](https://forum.oxid-esales.com/u/fthielen)\
**Post date:** [January 31, 2019, 10:29am UTC](https://forum.oxid-esales.com/t/permanent-ssl-address/94769/2 "2019-01-31T10:29:06Z")

</div>

Yes, just use case 2 + Apache Redirection ^^

---

<div class="post-metadata">

**Author:** ![walldemar](https://forum.oxid-esales.com/user_avatar/forum.oxid-esales.com/walldemar/32/261_2.png) [@walldemar](https://forum.oxid-esales.com/u/walldemar)\
**Post date:** [January 31, 2019, 12:01pm UTC](https://forum.oxid-esales.com/t/permanent-ssl-address/94769/3 "2019-01-31T12:01:09Z")

</div>

Yes… but still have error probably related to SSL…

---

<div class="post-metadata">

**Author:** ![baberowski](https://forum.oxid-esales.com/user_avatar/forum.oxid-esales.com/baberowski/32/1011_2.png) [@baberowski](https://forum.oxid-esales.com/u/baberowski)\
**Post date:** [February 1, 2019, 8:26am UTC](https://forum.oxid-esales.com/t/permanent-ssl-address/94769/4 "2019-02-01T08:26:08Z")

</div>

Possible this helps:  
use your case 2 and add this in yoour htaccess below RewriteBase /  
RewriteCond %{HTTPS} off [OR]  
RewriteCond %{HTTP\_HOST} !^www. [NC]  
RewriteRule (.\*) [https://www.mydomain.pl/%{REQUEST\_URI}](https://www.mydomain.pl/%25%7BREQUEST_URI%7D) [R=301,L]

---

<div class="post-metadata">

**Author:** ![system](https://forum.oxid-esales.com/user_avatar/forum.oxid-esales.com/system/32/4245_2.png) [@system](https://forum.oxid-esales.com/u/system)\
**Post date:** [February 1, 2020, 8:26am UTC](https://forum.oxid-esales.com/t/permanent-ssl-address/94769/5 "2020-02-01T08:26:12Z")

</div>

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.