SSL Issue

Posts: 8
Joined: 01/04/2008

Howdy,

I am just a few steps away from launching Ubercart on one of my sites, http://www.horseloverscentral.com but am having an issue with SSL when I hit the site with Internet Exploder. I do not believe it is an Ubercart problem but not sure what is triggering the error since the site works well with FireFox - the issue is that if you visit the site with https://www.horseloverscentral.com with Internet Exploder you will get an error that not all items are secure. Was wondering if anyone would have any idea what-so-ever what could be triggering this error.

Thanks!
Scott

Posts: 149
Joined: 08/07/2007
AdministratorNot Kulvik

It displays fine in my IE7 browser. I suspect you have an ssl certificate from a newer, less recognized certificate authority. Older versions of IE may not recognize this certificate authority and so issue this warning. If this is the case, it may not be important.

Do a Google search which browsers recognize your certificate authority. Once you find out the oldest versions of Firefox and IE which recognize your CA, search for what percentage of browsers on the Internet use that version or older. You will probably find it to be less then one percent. Of the less then one percent of browsers who see this message what percent will be deterred?

If the percentage is to great, you can purchase a certificate from an older, more established CA.

Posts: 1232
Joined: 08/14/2007
Bug FinderEarly adopter... addicted to alphas.Getting busy with the Ubercode.

It's probably not the issuing authority.. in my experience it's a link or javascript that's not being passed securely (http:// instead of https://) .. the easiest way to check this is with Firebug or by viewing the source directly.

I looked at your site and I didn't see anything outstanding, one suggestion might be the "Register it today" image that is coming from another server.

One thing to take care of troubleshooting this, is to disable, one at a time, any modules you're using that pull content from another source (xml/rss feeds, etc.). And when that module is disabled, refresh the page. One of those should give you the result of your site not having any insecure elements. When you find out which module you could check your settings, or add the path it's looking for into your Secure Pages config.

Hope this helps!

--

"Pain don't hurt." - Dalton

Mike Nelson's RiffTrax! www.rifftrax.com

Posts: 8
Joined: 01/04/2008

Thanks, I found the issue. It was with the Tabs Javascript Module - I will need to dig into why later but I don't need it so I am going to push forward without it.

Scott