Just enabled https and now "Forbidden"

heywood

All I did was check the box and now I don't have permission to access this resource.

[Wed Oct 29 08:13:33.510926 2025] [authz_core:error] [pid 8889] [client 10.251.22.1:64203] AH01630: client denied by server configuration: /srv/www/osticket/

KevinTheJedi

heywood

As the Help Text states:

Note, this will only work if you have an SSL certificate installed and have HTTPS configured on the server.

This means you actually have to have an SSL Certificate installed and setup for the site before you force HTTPS. Even then it's better to force HTTPS at the web server level. This is an older setting that was mainly used for shared hosts that didn't allow for SSL and web server configurations. These days SSL is standard and pretty much all hosts allow you to configure and force HTTPS at the web server level.

Note:
To revert this setting login to the database, go to the _config table, search for the record where key equals force_https, clear the value column (make it completely empty), and you should be good.

Cheers.

heywood

KevinTheJedi

So you cannot have a self-signed cert? It must be issued from a real outside CA?

heywood

Ok bonehead move on my part. I forgot to add the directory permissions (structure) to the default-ssl.conf file. Its a webserver (internal) that hosts only this website. Once I added that information to the file and restarted the service, it now works with a self-signed certificate and forces through https.

Thank you for putting me on the right path.