SSL half working!

[Whistle Ink]

Hi everyone!

I have set up (or think I have) a geo trust ssl thing and for it to only come in to action when a customer logs in or starts checkout.

When I test it, a box comes up saying there are both secure and non secure items. Then there is no padlock but does show https://www.whistle.........

Why is this happening. I read somewhere that images need to be coded RELATIVELY, not absolutely. So I checked this out! On the secure pages Some images come up as https://www.whistleink.co.uk/acatalog/brother.jpg (having https)

and others http://whistleink.co.uk/acatalog/oldsiteproductsaccess.jpg (not having https).

Does thi smake a difference? I can't see a secure site folder on my ftp anywhere!

Help!

 

[Coding Monkey]

I do receive a padlock at https://, and took a screenshot for you. You won't receive one if they visit https://whistleink.co.uk without the www., as that is the domain that the certificate is made out to.

http://www.codingmonkeys.biz/blah/Whistle.jpg

As for the images, they're not used for encrypting any information. The errors that may be given to the user from the wonderful IE is that you're accessing insecure information (the images), so it is better to have them hosted under https.

 

[Whistle Ink]

Thanks for replying - much apprciated! :smile:

The control panel says :

The certificate for the domain www.whistleink.co.uk is ready.

Are you saying I need it to read that the cert is for the domain http://www.whistleink.co.uk?

How do you host images under https???

Cheers :smile:

 

[Coding Monkey]

I'm saying that it's https:/www.whistleink.co.uk where it's based. www. and non www. are treated as different things in terms of certificates, as to many www. is a subdomain. As for hosting them, it depends on your setup. For example, I have a separate folder on my server entitled the esoteric "httpsdocs" for hosting secure files!

 

[Richard Conyard]

How do you host images under https???

When you specify the location of the images, css or any other files you are including in your page do not put http://www.whistleink.co.uk infront of them. Refer to them from their location in your site either absolutely i.e.

/images/image.jpg

or relatively

../../images/image.jpg

basically dropping the http parts should solve it.

 

[Whistle Ink]

Cheers Tom and Richard - I'll give the images one a go and see what happens!

I also have something linking to another site on those pages - the contstant contact code so maybe this is also causing a problem? I will remove this also and try it again.

Cheers :smile:

 

[Whistle Ink]

Just thought I'd report back!

I did as Richard suggested and removed all the http://whistleink.... from the images in the template and upload it and it worked a treat!!!

What a relief to see that golden padlock!

Many thanks for your help!

:smile: :smile:

 

[Richard Conyard]

not a problem