So there are two settings:
1) Redirected back to our website with no SSL
2) No redirection with working SSL

None of these is acceptable

The site is live, with payments in test mode... Need to fixed this asap... No response from WP about callback or SSL...

Any other suggestions?