LSWS 5.0.3 Updated To Fix Forced SSL On Google Chrome Version 44.0.2403.89

The latest Google Chrome version 44.0.2403.89 is currently redirecting all HTTP URLs to their HTTPS versions for certain web applications. This is caused by a bug in Chrome causing the “HTTPS: 1” header to be sent by default on every request. This is mainly causing problems for WordPress sites with the WooCommerce plugin installed as well as sites without HTTPS support. Because of WordPress and WooCommerce’s popularity, this bug may be affecting a large number of people.

WooCommerce has released an update for their WordPress plugin to fix this and Google is currently investigating the possibility of an emergency patch being issued. This however would require the patch to be installed individually on each WordPress installation. For the time being, LiteSpeed has stepped in to provide an easy solution for our customers who may be hosting hundreds of WordPress sites on a single server with the release of LSWS 5.0.3 build 2. In this build we address this issue by simply removing Chrome’s “HTTPS:1” request header for a fast and easy fix. If you are already using LSWS 5.0.3, you will still need to install this latest build.

To upgrade to the current build number:
Using the WebAdmin Version Manager: Upgrade from an older version or perform a force reinstall.
Using the Command Line: use /usr/local/lsws/admin/misc/lsup.sh -f -v 5.0.3


Categories:Security , Web Server

Related Posts


Comments