CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site
This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • FORCED SSL not working on Logo Images displayed in Organization profile
Pages: [1]

Author Topic: FORCED SSL not working on Logo Images displayed in Organization profile  (Read 1995 times)

supporters

  • I’m new here
  • *
  • Posts: 15
  • Karma: 0
FORCED SSL not working on Logo Images displayed in Organization profile
December 23, 2010, 12:06:34 pm
Help is appreciated.

The Forced SSL setting (under admin, config, global settings, resource urls) does not seem to work on organization logo images uploaded and displayed in the organization profile, causing a popup warning for "mixed content" in an IE browser as the call for the logo image file is prefixed with http:// rather than https:// as follows:

   logo image call:
   http://our.domain.org/sites/default/files/civicrm/custom/logo.gif

   web page trying to call the logo image:
   https://our.domain.org/civicrm/contact/view?reset=1&cid=3

   thus yielding the popup warning in the IE browser:
   "Do you want to view only the webcontent that was delivered securely?  
    This page contains content that will not be delivered
    using a secure HTTPS connection which could compromise
    the security of the entire web page."

We're running:  (simple install, nothing unusual)
 CIVICRM 3.3.0 on DRUPAL 6.19 with MYSQL 5.1.8 with PHP 5.2.14

with an SSL Certificate (https prefix, not shared)
with Forced SSL & https:// in the "Resource URL" global configuration settings
« Last Edit: December 23, 2010, 03:57:50 pm by supporters »

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: FORCED SSL not working on Logo Images displayed in Organization profile
December 23, 2010, 06:15:42 pm

Can you please reproduce this on our demo server and if so please file an issue here: http://issues.civicrm.org/

If important to you/your org, please consider investigating and filing a patch for this issue.

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

supporters

  • I’m new here
  • *
  • Posts: 15
  • Karma: 0
Re: FORCED SSL not working on Logo Images displayed in Organization profile
December 23, 2010, 06:44:17 pm
Unfortunately, I cannot reproduce the described error on the DEMO site for CIVICRM 3.3 because it's not setup with an SSL Certificate to function as https:// unless I'm mistaken.

I have submitted an issue / bug:
http://issues.civicrm.org/jira/browse/CRM-7265

Not sure what you mean by investigating the "patch" ... I searched the website and forums looking for similar issues / solutions to no avail thus far.
« Last Edit: December 23, 2010, 06:55:07 pm by supporters »

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: FORCED SSL not working on Logo Images displayed in Organization profile
December 23, 2010, 09:36:58 pm

did you try demo with https? it does work (u need to except the ssl certificate which is not valid)

https://drupal.demo.civicrm.org/civicrm/admin/

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

supporters

  • I’m new here
  • *
  • Posts: 15
  • Karma: 0
Re: FORCED SSL not working on Logo Images displayed in Organization profile
December 23, 2010, 11:37:52 pm
Thank you.  Yes, after accepting the invalid certificate, it worked, it would load the image and when I checked its URL it was calling https:// as follows:
https://drupal.demo.civicrm.org/sites/drupal.demo.civicrm.org/files/civicrm/custom/civicrm_diagram_tables_erd_2010dec23_a219e77f11154e6d30c8d782a0fa2e58.png

Appears perhaps we uploaded the image prior to the SSL certificate being fully installed therefore registered/called as http vs https.

Resolved.
« Last Edit: December 25, 2010, 03:46:56 pm by supporters »

Hershel

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4640
  • Karma: 176
    • CiviHosting
  • CiviCRM version: Latest
  • CMS version: Mostly WordPress and Drupal
Re: FORCED SSL not working on Logo Images displayed in Organization profile
December 26, 2010, 02:30:15 am
This issue can be reproduced on the demo by adding a logo to a contact using an http connection. Then switch to https and the logo source is absolute and uses http.

I would classify this as a bug because many of our hosting clients do not even have a need for SSL until after their contact database is built so it's quite common for contact adding and editing to have been done via http and then later a site is set to force SSL. In such a case, these logo links will generate the warning noted by the OP.
CiviHosting and CiviOnline -- The CiviCRM hosting experts, since 2007

See here for the official: What to do if you think you've found a bug.
Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • FORCED SSL not working on Logo Images displayed in Organization profile

This forum was archived on 2017-11-26.