Hi everyone! I know this is an old post but as I faced the same problem and I found a 'solution' for it I post my experience.
So, what I find is that the problem comes from the login.php from the admin folder. I do not understand php but as I do not have somebody to help me and I search for weeks to find a solution without success, I decided to take a look to the code just waiting for a miracle!
There are some differences in the code between the PS 1.4.8 and PS 1.4.9. for the login.php
In PS 1.4.8 on line 39 to 52 says:
if ((empty($_SERVER['HTTPS']) OR strtolower($_SERVER['HTTPS']) == 'off')
AND Configuration::get('PS_SSL_ENABLED'))
{
// You can uncomment theses lines if you want to force https even from localhost and automatically redirect
// header('HTTP/1.1 301 Moved Permanently');
// header('Location: '.Tools::getShopDomainSsl(true).$_SERVER['REQUEST_URI']);
// exit();
// If ssl is enabled, https protocol is required. Exception for maintenance and local (127.0.0.1) IP
if ($clientIsMaintenanceOrLocal)
$errors[] = translate('SSL is activated. However, your IP is allowed to use unsecure mode (Maintenance or local IP).').'<br/>';
else
$warningSslMessage = translate('SSL is activated. Please connect using the following url to log in in secure mode (https).')
}
In PS 1.4.9 on line 39 to 52 says:
if ((empty($_SERVER['HTTPS']) OR strtolower($_SERVER['HTTPS']) == 'off')
AND _PS_SSL_ENABLED_)
{
// You can uncomment theses lines if you want to force https even from localhost and automatically redirect
// header('HTTP/1.1 301 Moved Permanently');
// header('Location: '.Tools::getShopDomainSsl(true).$_SERVER['REQUEST_URI']);
// exit();
// If ssl is enabled, https protocol is required. Exception for maintenance and local (127.0.0.1) IP
if ($clientIsMaintenanceOrLocal)
$errors[] = translate('SSL is activated. However, your IP is allowed to use unsecure mode (Maintenance or local IP).').'<br/>';
else
$warningSslMessage = translate('SSL is activated. Please connect using the following url to log in in secure mode (https).')
}
So, I replaced the login.php from the PS 1.4.9 with the PS 1.4.8. And I could login without problem and the ssl warning disappeared.
Hope this would be useful for someone.
Regards!