Blocked loading mixed active content (HTTP / HTTPS) (OpenLayers)

[Brylie Christopher Oxley]

I recently installed an SSL certificate on our domain. Most things seem to be working correctly across the site, but CiviCRM OpenLayers maps are not rendering.

Code: [Select]

Blocked loading mixed active content "http://openlayers.org/api/OpenLayers.js

How can I configure CiviCRM to load the OpenLayers plugin over HTTPS instead of HTTP?

[norris]

I had the same problem, and downloaded a copy of the file to the server, then modified the templates/CRM/Contact/Form/Task/Map/OpenStreetMaps.tpl template to change the URL to point to the local copy instead, using https

Note that for proper template overrides you should set a custom template directory in Administrator->System Settings->Directories, then make a CRM/Contact/Form/Task/Map directory structure, and put the modified file in there.

I'm surprised I can't find an https version of the openlayers.js file officially hosted. Maybe I didn't look hard enough.

[Chris Burgess]

If you've gone to the effort of SSL-protecting your site, you might want to consider whether you want to include JS libraries from sites outside your control. Self-hosting is the best option for your own security.

Probably a good suggestion to package openlayers.js along with the template so this doesn't affect other CiviCRM on SSL sites.

[Coleman Watts]

The fix for core (v4.7) is to switch to a different cdn which supports https.
https://issues.civicrm.org/jira/browse/CRM-16294

But if one of you has done the work to add a local version of the js, how about sharing that as a CiviCRM Extension?