Locked out of /wp-admin with SSL activated

  • Hello!

    I have a very weird problem. I was given a website that has a SSL certificate installed (verified by https://www.ssllabs.com). Once I force the website to go onto https:// with either a plugin or htaccess it loads all pages fine except /wp-admin. I’m completely locked out, it says that I don’t have the permission to access it.
    As I didn’t make this website from scratch I have no clue what’s causing the problem. Maybe someone had a similar issue?

    I’ll add a note that Really Simple SSL plugin does not even detect a SSL cert, which never happened for me before.

Viewing 13 replies - 1 through 13 (of 13 total)
  • Regina

    (@reginabally)

    Hello there,

    Since you mentioned about Really Simple SSL plugin, I found a support topic related to your problem: https://www.ads-software.com/support/topic/plugin-not-working-after-activation/

    If you need further help on the plugin, you may start a new thread on the plugin support forum: https://www.ads-software.com/support/plugin/really-simple-ssl/

    Hope this helps.

    Thread Starter kyonv2

    (@kyonv2)

    As I said. This has nothing to do with Really Simple SSL. It happens with EVERY SSL plugin. I disabled all plugins and changed the adress to https:// and still the same result.

    Regina

    (@reginabally)

    Since you mentioned it only happens to wp-admin, have you performed the steps listed here? https://codex.www.ads-software.com/Administration_Over_SSL

    Thread Starter kyonv2

    (@kyonv2)

    Tried toying with the settings but now i’m just getting redirect loop.

    Regina

    (@reginabally)

    Could you share us your site address?

    Thread Starter kyonv2

    (@kyonv2)

    edited.

    Please let me know when you get it, I don’t want to leave the url in the public, hence the changed url.

    • This reply was modified 6 years, 6 months ago by kyonv2.
    Regina

    (@reginabally)

    Got it. Will take a look and let you know.

    Regina

    (@reginabally)

    Are you able to retrieve your server error log (specifically on 500 error)? Your issue could be unrelated to the SSL cert, it could be a code issue.

    Thread Starter kyonv2

    (@kyonv2)

    I have access to some server logs, got some errors with SSL it seems.

    https://privatebin.net/?373d6418eaed7116#4E6X7uzHl31QUEJPbLjoNfgwkTcUDWEkZdGL74iMWfo=

    password is: errors

    Regina

    (@reginabally)

    That error looks like it’s been thrown out from the Really Simple SSL.

    [Fri Aug 24 13:27:26.329280 2018] [proxy_fcgi:error] [pid 1830:tid 140589555238656] [client 46.134.147.85:4693] AH01071: Got error 'PHP message: ** Detecting configuration **\nPHP message: plugin version: 3.0.5\nPHP message: Check SSL by retrieving SSL certificate info\n', referer: https://.../wp-admin/plugins.php

    The current version of Really Simple SSL is 3.0.5.

    Please try this:
    1) Disable all plugins.

    2) If you’re able to login to the admin dashboard, install Health Check Plugin before you activate any of the other plugins. See which plugin is causing the error.
    https://www.ads-software.com/plugins/health-check/

    Could you list down the steps you did to install the SSL certificate?

    Thread Starter kyonv2

    (@kyonv2)

    Plugins were all disabled. I was just checking if any other worked. Sadly not, all plugins that force SSL just show “sorry you don’t have permission to view that page” error, if I don’t use any plugin and force it via .htaccess it’s still the same.

    Dump from the plugin:
    https://privatebin.net/?4c40d143d133fd2f#QPVftQ2PLYxZbn+KuwDM0cH8o6/TsnxRGlCZNMSVVpA=

    password: ‘logs`

    I was not the one to install SSL. Since we have a wildcard certificate and it works on other subdomains, I assume that certificate is not the problem. SSLlabs confirms that.

    • This reply was modified 6 years, 6 months ago by kyonv2.
    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Try this;

    // edit — forgot one thing:

    Clear any cookies related to your site and your browser history as it will try to be helpful and connect you to the “old” site.

    //

    1. Remove any SSL related plugins.

    2, Disable (for now) any caching / optimization plugins.

    3. Install the plugin “better search replace”

    4. Search for https://example.com and replace with https://example.com.

    5. Test your site.

    6. If there are still mixed-content messages showing in the browser’s error console, install the plugin ‘string locator’ and search for https://example.com. That should catch any hard-coded URLs that require hand fixing.

    7. When the site is fixed, you can uninstall those two plugins and re-enable any caching / optimization plugins.

    Thread Starter kyonv2

    (@kyonv2)

    As mentioned before all my plugins are disabled.

    I have tried using few plugins that replace urls (even DB-search and replace) but all it does it makes my website go into redirect loop.

    • This reply was modified 6 years, 6 months ago by kyonv2.
Viewing 13 replies - 1 through 13 (of 13 total)
  • The topic ‘Locked out of /wp-admin with SSL activated’ is closed to new replies.

Tags