Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Login leads to wrong URL when using ssl proxy #5290

Closed
anonymous-matomo-user opened this issue Jun 3, 2014 · 8 comments
Closed

Login leads to wrong URL when using ssl proxy #5290

anonymous-matomo-user opened this issue Jun 3, 2014 · 8 comments
Labels
Bug For errors / faults / flaws / inconsistencies etc. duplicate For issues that already existed in our issue tracker and were reported previously.

Comments

@anonymous-matomo-user
Copy link

Concerning Piwik 2.3.0

Given:

A short URL for piwik like <http://p.test.invalid>. This is <http://www.test.invalid/piwik/>.
An ssl proxy that redirects all <http://(*)test.invalid> traffic to <https://ssl.kundenserver.invalid/test.invalid>.
A rewrite-rule via .htaccess that perfectly works.
All above not run on an own server but a hosted web package.

Awaited (and worked with Piwik 1):

Calling <http://p.test.invalid> invokes the correct Piwik login page.
Logging in there forwards to the correct address <https://ssl.kundenserver.invalid/test.invalid/piwik/index.php?module=MultiSites&action=index&idSite=1&period=range&date=last30>.

What happens with Piwik 2:

Calling <http://p.test.invalid> invokes the correct Piwik login page.
Logging in there forwards to the WRONG address <https://ssl.kundenserver.invalid/piwik/index.php>
After that happens one can circumnavigate the problem with calling once more again <http://p.test.invalid>.
THEN the right URL occurs: <https://ssl.kundenserver.invalid/test.invalid/piwik/index.php?module=MultiSites&action=index&idSite=1&period=range&date=last30>.

This is a problem for the user.

But this could be also critical for all Piwik users due to the fact that it could be that all Piwik calls with Piwik 2, using this specific ssl proxy service lead to the central ssl proxy address.

Ive anonymized the adresses, but the scheme is as is. This is a service provided by 1&1 in Germany.

Piwik forgets the specific site URL part in the forwarded new address.

This did not happen with Piwik 1, it is new to Piwik 2.

Piwik 2 has a problem to detect (?) and work with an ssl reverse proxy setup. It also does not show an own logo branding and it does not show the little graphs at the multiple sites dashboard.

Piwik 1 had another problem to detect and work with an ssl reverse proxy setup. It either did not show an own logo branding but it showed all other graphs, including the previews graphs at the multiple sites dashboard.

I dont know if it is of interest, but: When logging out, Piwik 2 leads to the right login adress <https://ssl.kundenserver.invalid/test.invalid/piwik/index.php?module=CoreHome&action=>, maybe this is a point to narrow the bug.

@mattab
Copy link
Member

mattab commented Jun 5, 2014

Thanks for the report!

Did you configure something in your config file as explained in the Proxy FAQ?

@mattab
Copy link
Member

mattab commented Jun 5, 2014

See also
#5250 HTML email reports: Links to Piwik and Icons not working on HTTPS (IP address used instead of hostname)
#5288 Sparklines fail to load behind reverse proxy because of wrong URI

@anonymous-matomo-user
Copy link
Author

In my config these take place:

[General]
force_ssl = 1
assume_secure_protocol = 1
proxy_client_headers[] = "HTTP_X_FORWARDED_FOR"
proxy_host_headers[] = "HTTP_X_FORWARDED_HOST"

@anonymous-matomo-user anonymous-matomo-user added this to the 2.5.0 - Piwik 2.5.0 milestone Jul 8, 2014
@thetrial
Copy link

Any news in the development according to this problem? With 2.4 and 2.4.1 nothing is corrected yet?

@mattab
Copy link
Member

mattab commented Aug 3, 2014

@thetrial we have not yet schedule this bug. If you need it fixed asap please contact: http://piwik.org/consulting/ - Thank you!

@thetrial
Copy link

thetrial commented Sep 5, 2014

Well, I left the whole ssl proxy stuff with piwik for now, but I don’t think that this is it. Especially piwik should be able to handle these things proper.

Any news concerning that? Sadly I cannot try it anymore, now.

@mattab
Copy link
Member

mattab commented Apr 8, 2015

let's investigate this issue as part of the broader set of bugs in #6880 -> our goal will be to make Piwik work perfectly in this special use case which many users have reported issues with.

@mattab
Copy link
Member

mattab commented Nov 2, 2015

See #6644

@mattab mattab closed this as completed Nov 2, 2015
@mattab mattab added the duplicate For issues that already existed in our issue tracker and were reported previously. label Nov 2, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug For errors / faults / flaws / inconsistencies etc. duplicate For issues that already existed in our issue tracker and were reported previously.
Projects
None yet
Development

No branches or pull requests

3 participants