Author Topic: Insecure image URLs cause "force SSL" to fail (Read 2098 times)

m.e. · February 03, 2011, 04:10:36 pm

I can't get the resource_URLs page to recognize our SSL cert even though I can open many pages on https without error.

I've been using IE8 to debug since it gives me an option of not loading insecure items -- then I can see where the problem lies.

When I open https://www.mysite.com/civicrm without insecure items in IE8, many images (such as our banner image, background for menu tabs, etc.) from my local.css are missing. Sure enough, these files will not open at https in IE8; however, I have no trouble opening them in Firefox (but still get broken security at the /civicrm URL).

Any ideas how to solve this? We are using the Acquia Marina subtheme of Fusion, with Skinr.

ken · February 04, 2011, 03:15:06 am

@m.e,

How does your CSS file refer to background images etc. If these are absolute (http://.....) then they'll be loaded insecurely. try a relative address.

Ken

m.e. · February 04, 2011, 11:30:56 am

Thanks, @Ken. I tried just hard coding images in the .css to https and this does solve the problem in IE8. In Firefox, however, I am still getting a security warning about insecure items on the page (although nothing appears to be missing). We do have a persistent Javascript error from the Fusion theme we're using and I wonder if that can interfere with SSL in some browsers. Do you know? As nearly as I can tell the Javascript error is only on CiviCRM pages (dashboard, donations, etc.).

ken · February 04, 2011, 03:54:28 pm

I have no experience with Fusion nor Javascript. I just had a problem last year with absolute URLs in the CSS, and relative URLs fixed that.

Exactly which elements are being served up as HTTP?

To find out in FireFox do ...

Right click on the Firefox window
Click the 'View page info' menu
Click on the 'Media' tab
Scroll down the list, noting URLs that are HTTP rather than HTTPS

Work out how those URLs are making it into your page (I suspect the CSS is a false trail and it's the theme).
Sanitise the URLs and post them here (perhaps someone can figure it out).

Ken

m.e. · February 04, 2011, 04:20:38 pm

All the media URLs are using https. I started a new thread after trying (without success) many other attempts at troubleshooting; see http://forum.civicrm.org/index.php/topic,18472.0.html

CiviCRM Community Forums (archive)

News:

Author Topic: Insecure image URLs cause "force SSL" to fail (Read 2098 times)

m.e.

Insecure image URLs cause "force SSL" to fail

ken

Re: Insecure image URLs cause "force SSL" to fail

m.e.

Re: Insecure image URLs cause "force SSL" to fail

ken

Re: Insecure image URLs cause "force SSL" to fail

m.e.

Re: Insecure image URLs cause "force SSL" to fail