SSL and CB User Mgt Hanging again

You might remember that I had a frustrating issue with CB User Mgt hanging - generally ending up with a 500 error.

I "resolved" this by rebuilding the test site - where the issue did not occur.

I also had the issue that enabling Force HTTPS in CBS Settings caused the application of Discount Coupons to fail (as it seemed to lose track of the payment basket) - and you suggested that it was better to use SSL across the whole site.

I have just enabled SSL across the entire site following the guidance on www.gavick.com/documentation/general-questions/how-to-use-ssl-in-a-joomla-site/ and initial testing front and back end looked fine - until I tried to load CB User Mgt in the backend. And again the page hung and eventually the following 500 error appeared: "The page you requested ( www.sag.org.au/administrator/index.php?option=com_comprofiler&task=showusers ) resulted in an 'Internal server error' (error 500)".

Can you think of anything in the SSL enabling process that might contribute to this issue re-emerging? I note that the URL quoted shows neither the Https:// or the test3. prefix of the test site, but trying to load test3.sag.org.au/administrator/index.php?option=com_comprofiler&task=showusers directly shows the same hanging behaviour.

J2.5.16 CB1.9.1 CBS3.0.0

PS I have unwound the SSL enabling to allow for testing on the site to continue.

SSL is going to cause some slow down, but it shouldn't be so bad that it crashes the site. There's nothing I can really suggest except work with your host as SSL seams to be the culprit.

I have tried again to activate SSL across the entire test site and the CB User Mgt page still hangs.

I raised a support ticket with the hosting service and have attached that exchange to this post.

Their key conclusion seems to be the problem with the User Mgt page is caused by "URL redirects which your website might be using and which might be trying to force URL's without https, so that it can't properly load and/or loops indefinitely."

I am hoping you might be able to help me progress the resolution of this issue which, together with the problems I raised here in a separate ticket with just forcing SSL for CBS forms, is a hurdle delaying our site going live.

CB doesn't do any kind of forced redirecting. The only place forced redirect is in place is CBSubs when using the credit card form and only if it's enabled. CB > User Management as absolutely no such feature. It's just a table formatted from SQL data. Ensure live_site within configuration.php is set to '' (empty) to ensure live_site isn't being loaded as http as maybe that's the cause.

Have checked that live_site within configuration.php is set to '' (empty).

So to clarify my understanding you are saying that clicking on the backend menu item for CB | User Mgt - or just inserting the URL into the browser when logged in - will call a simple table layout page populated with a number of SQL queries. There is nothing in these html and mysql calls that would be affected adversely by the presence of https://.

If so I am wondering if the culprit must be in the .htaccess file, which in my case is managed by Akeeba's Admin Tools. The SSL implementation guidance from the gavick reference included adding some lines to the end of the .htaccess file (which I did and tried both with and without), but possibly there is some conflict with the security protection settings elsewhere in the .htaccess file.

So I am thinking of investigating this further in my next testing phase, such as by adding URLs for which the Admin Tools protections should be bypassed, or removing them altogether - and would appreciate any thoughts you may have that might help.

So to clarify my understanding you are saying that clicking on the backend menu item for CB | User Mgt - or just inserting the URL into the browser when logged in - will call a simple table layout page populated with a number of SQL queries. There is nothing in these html and mysql calls that would be affected adversely by the presence of https://.

Correct, it doesn't care if it's HTTP or HTTPS as neither have any impact on what it's doing (showing a list of users). A 500 error is a server error though so it is probably still something related to the usage of SSL on your hosts end. It also doesn't make much sense as to why it specifically affects user management and none of CBs other pages.