SSL Upgrade Breaks Admin Dashboard

  • Resolved MichaelPaulmeno

    (@michaelpaulmeno)


    8 years, 6 months ago

    I am currently running an instance of WordPress, version 4.5.3, on an Amazon EC2 server. It uses CentOS 7 as the OS and has SELinux enabled. My server runs Apache with mod_security and mod_evasive as well as PHP 5.6.24. You can view the site here: https://www.ramblingnewyorker.com/.

    Not long ago I upgraded to SSL using Let’s Encrypt. The process was fairly simple and I now have the front end secured. I’ve installed a plugin which redirects non-SSL traffic to the secure site. Unfortunately the admin dashboard is broken. As soon as I did the switch over it started looking as follows:
    https://www.dropbox.com/s/hp3tlcbxsc5ised/wordpress%20ssl%20problem.png?dl=0. I’ve changed the URLs (in the database, not through the dashboard) to be the SSL version and enabled “Force SSL Admin” in the config file. The login page is fine.

    The switch over once worked when I disabled all plugins. Re-enabling them one by one led me to believe WP Super Cache may be the issue, but when I did the switch over after deleting the plugin the problem recurred. Disabling mod_security eliminates the problem, but there are no helpful error messages in the Apache error logs so I don’t know what’s upsetting it.

    The only clue is that requests for load-styles.php and load-scripts.php return a 403 error:

    https://www.dropbox.com/s/t43p9esfb5ltnfp/wordpress%20ssl%20problem%202.png?dl=0.
    However those files have the same ownership (apache:apache) and permissions as every other file in the wp-admin folder (644). So I am clueless. Does anyone have an idea what the underlying cause might be?

Viewing 1 replies (of 1 total)
  • Thread Starter MichaelPaulmeno

    (@michaelpaulmeno)

    I figured it out. One of the mod_security rules was preventing the admin dashboard from loading properly. The key was to check the SSL error log. Once I did so, and disabled the offending rule for a few files, everything was fine.

Viewing 1 replies (of 1 total)
  • The topic ‘SSL Upgrade Breaks Admin Dashboard’ is closed to new replies.

Tags