Password is 'forgotten' after creating a site with SSL

[JoostBaksteen]

I'm running into a 'bad user name or password' after creating an ssl site.

I've debugged the problem as far as I could and noticed the password is not sent to the server anymore after creating a new site.

The wordpress instance I'm using is running:

• wordpress 3.0.1,
• php 5.3.3
• version 2.6 of the app
• a self signed SSL certificate (that I installed on my iphone, so it is trusted)

Steps to reproduce:

• Add a new site
• Enter URL (entering ​https://..)
• Enter user
• Enter password
• Press 'Add Site' at the bottom

Now I can see 3 proper requests coming into wordpress (debug_print_backtrace() in xmlrpc.php::login()):

#1  wp_xmlrpc_server->mw_getCategories(Array ([0] => 1,[1] => joost,[2] => testpass)) called at [/var/www/wp-includes/class-IXR.php:367]
#1  wp_xmlrpc_server->wp_getPostStatusList(Array ([0] => 1,[1] => joost,[2] => testpass)) called at [/var/www/wp-includes/class-IXR.php:367]
#1  wp_xmlrpc_server->wp_getPageStatusList(Array ([0] => 1,[1] => joost,[2] => testpass)) called at [/var/www/wp-includes/class-IXR.php:367]

So far so good, the password is passed, everything is ok. Now:

• I click on my newly created blog
• Go to 'Posts'
• Click the refresh button

Now I see 2 faulty requests (notice the password is not sent anymore):

#0  wp_xmlrpc_server->login(joost, ) called at [/var/www/xmlrpc.php:2638]
#1  wp_xmlrpc_server->mw_getRecentPosts(Array ([0] => 1,[1] => joost)) called at [/var/www/wp-includes/class-IXR.php:367]
#2  IXR_Server->call(metaWeblog.getRecentPosts, Array ([0] => 1,[1] => joost)) called at [/var/www/wp-includes/class-IXR.php:323]
#3  IXR_Server->serve() called at [/var/www/wp-includes/class-IXR.php:305]

#0  wp_xmlrpc_server->login(joost, ) called at [/var/www/xmlrpc.php:2739]
#1  wp_xmlrpc_server->mw_getCategories(Array ([0] => 1,[1] => joost)) called at [/var/www/wp-includes/class-IXR.php:367]
#2  IXR_Server->call(wp.getCategories, Array ([0] => 1,[1] => joost)) called at [/var/www/wp-includes/class-IXR.php:323]
#3  IXR_Server->serve() called at [/var/www/wp-includes/class-IXR.php:305] 

So I get an "Communication Error: Bad user name or password" error.

If I set the connection to use HTTP instead of HTTPS it works fine, so it must be something with SSL.

I tried to reproduce it with the current SVN branch but I can't install a self signed certificate in the iPhone simulator, so the app won't connect because of an untrusted certificate.

Let me know if there's anything you need or if I can do anything to help.

Thanks,
Joost

[mrroundhill]

Anyone have a self-hosted https site we can test against?

[koke]

Replying to mrroundhill:

Anyone have a self-hosted https site we can test against?

Got one :)

[mrroundhill]

I can't reproduce this in the latest 2.6.4 build on a self-hosted site with a self-cert. There's been a lot of work done around the 'bad username and password' error lately. @JoostBaksteen? - Please try this again when 2.6.4 is out in a few weeks and let us know if it's still an issue.