I've been trying to get Drupal to work with SSL (mod_ssl/Openssl),
virtualhost, and Apache webserver. Before go on, let me give you
the specifications of each involving component:
Drupal: 4.6.5
OS: Slackware 10.1
Kernel: 2.4.14
OpenSSL: 0.9.7d
Apache: 2.0.52
mod_ssl: 2.8.22
One last thing, I am utilizing clean URL with drupal and it has been
working great with the normal settings for a while (non-SSL that is).
My initial plan/goal was to use SSL for certain number of pages within
Drupal, mainly login (user/admin) and account sensitive information.
I was planning to accomplish that with help of RewriteEngine to
redirect from http://drupalsite/user to https://drupalsite/user. But
while I was trying to get the rewrite to work, I realize even if I
directly point my browser to any https://drupalsite/... (or even
drupal's root directory, that is https://drupalsite/), the page is not
being encrypted in any form (no sign of lockbox in the browsers, IE,
FF, Mozilla, etc.). So for now, I am struggling to get the encryption
to work with drupal and taken out all redirections out, except drupal's
default rewrite so I can debug the SSL issue first.
The SSL works fine with everything else except drupal. Case in point,
I created a separate virtualhost with different docroot and tried
a dummy FORM with user/pass fields, ran the packet sniffer to see
if the POST is being encrypted which it did. Then I assumed there