Ok, I figured out a patch to logic.php, it works for me, but should be treated as alpha.
The problem stems from the return_to being set based on get_option(‘home’). This may return a https:// URL, but when forcing ssl, we need to return to an https://.
--- logic.php.orig 2008-08-07 04:52:08.000000000 -0400
+++ logic.php 2008-09-27 03:09:35.000000000 -0400
@@ -515,6 +515,9 @@
// build return_to URL
$return_to = trailingslashit(get_option('home'));
+ if (force_ssl_admin() || force_ssl_login()) {
+ $return_to = preg_replace('|^https://|', 'https://', $return_to);
+ }
$auth_request->return_to_args['openid_consumer'] = '1';
$auth_request->return_to_args['action'] = $action;
if (is_array($arguments) && !empty($arguments)) {
Perhaps someone can do some more thorough testing and encorporate this into the next release.