title: How to force Authorize.net Directpost reply_url to be HTTPS?
body: <p>I'm trying to enable the Authorize.net DPM (Direct Post Method) on a Magento 1.11.1 production site. My test site (also Magento 1.11.1.0) works fine because the site is not secure (frontend SSL), but the live site gets an error. Turns out the reply_url sent to Authorize.net (x_reply_url) is being sent as non-ssl (e.g. <a href="http://mysite.com/authorizenet/directpost_payment/response" rel="nofollow">http://mysite.com/authorizenet/directpost_payment/response</a> as a POST). However, this gets a 500 error because Magento is set to require SSL on the frontend. If I send a test post using (<a href="https://mysite.com/authorizenet/directpost_payment/response" rel="nofollow">https://mysite.com/authorizenet/directpost_payment/response</a> as a POST) it gets a 200 response. I'm looking at this by having turned on Debug in the DPM payment method and then viewing the file var/log/payment_authorizenet_directpost.log.</p>
  
  <p>So I'm looking through all the code in app/code/core/Mage/Authorizenet and have yet to pull out a section of code where it might be getting this non-ssl URL. And of course then answer the question of "Why isn't it pulling a secure URL instead?".</p>
  
  <p>It looks like it originates possibly in the placeAction method of controllers/Directpost/PaymentController.php.</p>
  
  <p>I was hoping I might get some informed insight here as to whether I'm on the right track and how best to log or var_dump the appropriate variables (on my test site) to verify any changes.</p>