Site broken in Chrome (SSL issue)

More details on https://develop.woothemes.com/woocommerce/2015/07/woocommerce-2-3-13-security-and-maintenance-release/

This is not a bug from Chrome, but a future feature. It is from a specification from W3C, what it does is that Chrome (and all the browsers) in the future will send “HTTPS: 1” header, based on the policy that it wants to request secure version. This can be found at: https://www.w3.org/TR/upgrade-insecure-requests/#https-http-request-header-field

Hey,

Although this is not a WooCommerce problem but a pure Google Chrome one. This plugin available on GitHub can save you a lot of troubles until the next Chrome version is out.

There is also a detailed explanation about the problem:

https://goo.gl/D54cWv

Cheers

@frique, I just made an account so I could thank you. Would have been dead in the water otherwise. Lifesaver!

@frique,

if you’re ever in the vicinity of Gothenburg, Sweden, I’ll buy you a beer.

$_SERVER['HTTPS'] = false; saved my day. I also sent a bug-report to EventOn which is what was screwing my sites up.

thank you very much @frique. i wish i found your workaround earlier as i went ahead and bought an SSL certificate!

I have added a condition to your suggested code which works well for my sites:

if (!is_ssl()) {
	$_SERVER['HTTPS'] = false;
}

Just a quick update, as we’ve been helping some clients with this as well – if you’re not updating WooCommerce another fix is to add this to the top of your .htaccess:

# BEGIN Resolve Chrome Issue
RequestHeader unset HTTPS
# END Resolve Chrome Issue

The Chrome devs are aware of this issue (it’s causing problems for many sites, not just those using WooCommerce) and I believe it will also be fixed on their end by changing the name of the header in a coming upgrade.

Thanks chris-lightningbase!

Hi guys, this plugin will fix this issue for you.
https://www.wdc.me/chrome-ssl-fix.zip

Thanks @frique !

@frique you saved my holidays!
Thank you very much

It’s not a Chrome bug. It’s an Apache/PHP bug.

Long term solutions can be found here: https://nginx.org/. ??

@alan-c I can’t understand nothing ??

https://www.wdc.me/chrome-ssl-fix.zip fixes the issue. Buy de guy a beer (donate through Paypal)

What is it @syllogic?