5 replies [Last post]
joe4's picture
Offline
Joined: 07/15/2008
Juice: 29

Follow up from this post that requested the discussion to be moved. http://www.ubercart.org/faq/2941#comment-29445

I did not say secure pages is no good just that there are alternatives. I feel that most people have become much more comfortable running beta software in production because of companies like Google keep products like Gmail beta. I am sure there is a good reason why securepages is still beta, my guess is the amount of support issues. http://drupal.org/project/issues/securepages?states=all I do not want to bother the author of the project with the beta question but only he truly knows.

I will test the htaccess file further but I am not receiving any mixed secure/unsecure content errors. Do you? Also I do not get the error when submitting the contact page https://www.runssl.com/contact

I also checked my firefox settings under secure to include.
Warn me when I am submit information that is not encrypted
And the bottom one about warning mixed content. Still no warning. Still need to test with IE.

Any feedback welcomed.

qrios's picture
Offline
Cool profile pic award.Getting busy with the Ubercode.Internationalizationizer
Joined: 08/13/2007
Juice: 554
Re: SSL htaccess redirects. Discussion moved from FAQ.

You need to test in IE, specifically IE7. Because this is the browser giving users a hard time accessing pages that have mixed secure/insecure content.

joe4's picture
Offline
Joined: 07/15/2008
Juice: 29
Re: Re: SSL htaccess redirects. Discussion moved from FAQ.

I tested in both IE and Firefox. If you use relative paths you do not get any errors but if you call a image from the full url you will. From what I can tell the all default Drupal images use the relative paths and so does IMCE for images.

You can test with is url.
Without SSL http://www.runssl.com/content/what-everyone-ought-know-about-ssl-certifi...
and
With SSL https://www.runssl.com/content/what-everyone-ought-know-about-ssl-certif...

If someone gets a error please update this thread, also feel free to send demo data using the contact form. I am unable to replicate the error mentioned in the FAQ.

vph
vph's picture
Offline
Joined: 02/06/2009
Juice: 1
Re: Re: Re: SSL htaccess redirects. Discussion moved from FAQ.

Thank you. I think I'm going to try these alternatives.

I've just created this issue here: http://drupal.org/node/370468

I believe SSL was set up properly by our webhost (we have a VPS account). I spent the last several hours unsuccessfully trying to get SecurePages to work. Now, I'm looking for an alternative, simpler solution, maybe using .htaccess. So I really like to see solutions like this.

Thanks.

needle's picture
Offline
Joined: 05/21/2009
Juice: 2
follow up results

Received this error

There is a problem with this website's security certificate.

The security certificate presented by this website was issued for a different website's address.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.

Browser: IE7

joe4's picture
Offline
Joined: 07/15/2008
Juice: 29
Needle Please try again, it

Needle

Please try again, it should be fixed now.