CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site

This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Installing CiviCRM »
  • Drupal Installations (Moderator: Piotr Szotkowski) »
  • Insecure image URLs cause "force SSL" to fail
Pages: [1]

Author Topic: Insecure image URLs cause "force SSL" to fail  (Read 2098 times)

m.e.

  • I post frequently
  • ***
  • Posts: 157
  • Karma: 5
  • CiviCRM version: 4.0.9
  • CMS version: Drupal 7.9
Insecure image URLs cause "force SSL" to fail
February 03, 2011, 04:10:36 pm
I can't get the resource_URLs page to recognize our SSL cert even though I can open many pages on https without error.

I've been using IE8 to debug since it gives me an option of not loading insecure items -- then I can see where the problem lies.

When I open https://www.mysite.com/civicrm without insecure items in IE8, many images (such as our banner image, background for menu tabs, etc.) from my local.css are missing. Sure enough, these files will not open at https in IE8; however, I have no trouble opening them in Firefox (but still get broken security at the /civicrm URL).

Any ideas how to solve this? We are using the Acquia Marina subtheme of Fusion, with Skinr.

« Last Edit: February 03, 2011, 04:27:18 pm by m.e. »

ken

  • I live on this forum
  • *****
  • Posts: 916
  • Karma: 53
    • City Bible Forum
  • CiviCRM version: 4.6.3
  • CMS version: Drupal 7.36
  • MySQL version: 5.5.41
  • PHP version: 5.3.10
Re: Insecure image URLs cause "force SSL" to fail
February 04, 2011, 03:15:06 am
@m.e,

How does your CSS file refer to background images etc. If these are absolute (http://.....) then they'll be loaded insecurely. try a relative address.

Ken

m.e.

  • I post frequently
  • ***
  • Posts: 157
  • Karma: 5
  • CiviCRM version: 4.0.9
  • CMS version: Drupal 7.9
Re: Insecure image URLs cause "force SSL" to fail
February 04, 2011, 11:30:56 am
Thanks, @Ken. I tried just hard coding images in the .css to https and this does solve the problem in IE8. In Firefox, however, I am still getting a security warning about insecure items on the page (although nothing appears to be missing). We do have a persistent Javascript error from the Fusion theme we're using and I wonder if that can interfere with SSL in some browsers. Do you know? As nearly as I can tell the Javascript error is only on CiviCRM pages (dashboard, donations, etc.).
« Last Edit: February 04, 2011, 12:09:42 pm by m.e. »

ken

  • I live on this forum
  • *****
  • Posts: 916
  • Karma: 53
    • City Bible Forum
  • CiviCRM version: 4.6.3
  • CMS version: Drupal 7.36
  • MySQL version: 5.5.41
  • PHP version: 5.3.10
Re: Insecure image URLs cause "force SSL" to fail
February 04, 2011, 03:54:28 pm
I have no experience with Fusion nor Javascript. I just had a problem last year with absolute URLs in the CSS, and relative URLs fixed that.

Exactly which elements are being served up as HTTP?

To find out in FireFox do ...
  • Right click on the Firefox window
  • Click the 'View page info' menu
  • Click on the 'Media' tab
  • Scroll down the list, noting URLs that are HTTP rather than HTTPS

Work out how those URLs are making it into your page (I suspect the CSS is a false trail and it's the theme).
Sanitise the URLs and post them here (perhaps someone can figure it out).

Ken

m.e.

  • I post frequently
  • ***
  • Posts: 157
  • Karma: 5
  • CiviCRM version: 4.0.9
  • CMS version: Drupal 7.9
Re: Insecure image URLs cause "force SSL" to fail
February 04, 2011, 04:20:38 pm
All the media URLs are using https.  I started a new thread after trying (without success) many other attempts at troubleshooting; see  http://forum.civicrm.org/index.php/topic,18472.0.html
« Last Edit: February 04, 2011, 04:23:01 pm by m.e. »

Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Installing CiviCRM »
  • Drupal Installations (Moderator: Piotr Szotkowski) »
  • Insecure image URLs cause "force SSL" to fail

This forum was archived on 2017-11-26.