I am trying to get the admin pages to be encrypted, for obvious reasons.
The SSL cert is up and fine, and the .htaccess file is straight out of the CMSMS FAQ:
Code: Select all
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
If I rename the htaccess and log in with http, everything is fine. If I'm already in the console in http, re-enable https, and refresh the page - it redirects properly, I can navigate inside the admin console, but the images all give the security warnings associated with mixed-mode pages, since I don't have the htaccess file in the theme directories.
I can't for the life of me figure out why the login is failing so hard. Any thoughts?
Thanks!