I had most of it resolved but still needed to add the if statement to wp-config to make it work right.
define(‘FORCE_SSL_ADMIN’, true);
define(‘FORCE_SSL_LOGIN’, true);
if ($_SERVER[‘HTTP_X_FORWARDED_PROTO’] == ‘https’)
$_SERVER[‘HTTPS’]=’on’;
That gives me Word Press logons under SSL but doesn’t give me Simple Press logons using SSL. The only thing I care about is the logon. After that it can go back to http.
I could go in and mod the logon function but that would like get overwritten with the next update. A secure logon plugin would be nice.
An interesting note for people that might think about installing a separate Application Request Routing Server is that you really need to do a mips analysis on all the resources it needs to touch. Sizing can become somewhat exponential resulting in bottlenecks. It can provide disk caching but that’s not a good choice with dynamic websites and specially ones like WordPress that are constantly changing. There are other problems also such as the way it deals with static and dynamic compression.
What I ended up doing was placing all of my http requirements on a relatively large webserver and then use the ARR server to manage the SSL requests only. I can now route SSL to several servers on a single IP address and still deliver HTTP traffic on that same address. This was my original goal but then I decided to push the envelope.
The reason this all came about is because I have several small business clients that have MS Small Business Server. My forte’ is IT cost reduction and this is another tool for accomplishing that.
