Project

General

Profile

Actions

Bug #2863

closed

$_SERVER['HTTPS'] showing "on" despite not being a HTTPS request

Added by patryk about 7 years ago. Updated about 7 years ago.

Status:
Duplicate
Priority:
Normal
Category:
-
Target version:
ASK QUESTIONS IN Forums:

Description

Hi!

we have a Lighttpd + PHP-FPM setup and getting sometimes non-https requests but the $_SERVER['HTTPS'] global variable in PHP is showing "on". I'm not able to reproduce it, it happens from time to time - but if it happens it stays this way. All our vhosts on this server are then affected by that problem. We don't have any proxy/routing/load-balancing setup.

Lighttpd version is 1.4.31-4+deb7u5 (Debian Wheezy package). The header somehow gets "corrected" when i access a different vhost via a mod_proxy forwarded request... it feels like "HTTPS" gets cached and then fixed.

I searched the the issue tracker and checked the changelogs of newer Lighttpd versions. The only issue i found that might be somehow related is https://redmine.lighttpd.net/issues/1499 but i'm not really sure... or could this be an PHP issue (running 5.5.38-1~dotdeb+7.1)?

Thanks!

Cheers,
Patryk

#1

Updated by gstrauss about 7 years ago

  • Status changed from New to Duplicate
Actions

Also available in: Atom