What I have done
Installed Secure Pages Module
Installed Secure Pages Hijack Prevention
Installed Clean Urls
Installed patch http://drupal.org/files/issues/securepages.module_4.patch for error on homepage "Parameter 2 to securepages_link_alter()"

SCENARIO I

SETTINGS

Enable Secure Pages "Enabled"
Switch back to http pages when there are no matches "Not checked"
Non-secure Base URL "Empty"
Secure Base URL "Empty"
Pages which will be be secure "Make secure only the listed pages."
Pages:
user/register
/user/register
*/user/register*
*user/register*
Ignore pages:
*/autocomplete/*
*/ajax/*
content/*
blog/*

RESULTS

Homepage is not encrypted
Voting Stadistics (voteupdown) is not encrypted
Request new password (user/password) is not encrypted
Read a blog post (blog/4) becomes encrypted
Read a content page (/content/test-draft) is not encrypted
Read page (node/1) where the link is "http://drupal1.toonboom.com/node/1" the page loads not encrypted

SCENARIO II

SETTINGS

Clear URLs "enabled"
Enable Secure Pages "Enabled"
Switch back to http pages when there are no matches "Not checked"
Non-secure Base URL "Empty"
Secure Base URL "Empty"
Pages which will be be secure "Make secure every page except the listed pages."
Pages:
user/register
/user/register
*/user/register*
*user/register*
Ignore pages:
*/autocomplete/*
*/ajax/*
content/*
blog/*

RESULTS

Admin page becomes encrypted (admin/build/securepages)
I clear cookies and delete web history
Close borwser and open it again
Homepage is not encrypted
Voting Stadistics (voteupdown) is not encrypted
Request new password (user/password) is not encrypted
Read a blog post (blog/4) becomes encrypted
if I go back (back button to unencrypted homepage) and go into create account (user/register) is not encrypted
Create new account (user/register) is not encrypted
Read a blog post (/blog) is not encrypted
Read a content page (/content/test-draft) is not encrypted
Read page (node/1) where the link is "http://drupal1.toonboom.com/node/1" the page then loads encrypted "https://drupal1.toonboom.com/node/1"
The homepage link, is now https, if I go into homepage encrypted then all links in it (blog, register, content etc) are encrypted

SCENARIO III
I have unable secure pages, 8 hours latter

Result, when user logs in entire site gets encrypted (yes! with secure pages not enabled)

I dont know what can such unstable changes. I suspect is the server configuration. Does anyone has any theories of what to look for?

Comments

beautifulmind’s picture

Same issue here.