httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Axel-St├ęphane SMORGRAV <Axel-Stephane.SMORG...@europe.adp.com>
Subject RE: [users@httpd] SSL & nonsecure items
Date Wed, 26 Apr 2006 19:01:54 GMT
Make those links relative instead of absolute, i.e. yank the scheme://host part. That will
do the trick

-ascs 

-----Original Message-----
From: Warhurst, SI (Spencer) [mailto:S.I.Warhurst@rl.ac.uk] 
Sent: Wednesday, April 26, 2006 5:45 PM
To: users@httpd.apache.org
Subject: RE: [users@httpd] SSL & nonsecure items


> > I'm currently wrestling with the set up of SSL on Apache
> (on Windows) and I have the server up and running and accepting https 
> connections etc. When I first connect to the website from my browser 
> (IE in this case) I get the warning regarding the certificate (I have 
> set up a test certificate), which is fine. However every page I 
> subsequently go to I get a "do you want to display nonsecure items" 
> dialog and it's quite irritating. I suspect a browser setting is 
> partly to blame, except I don't get the message when I go to other 
> sites with https implementations such as Amazon. I presume the 
> nonsecure items are the images on the page, but Amazon has images too. 
> SO is there something in the SSL config that might cause the browser 
> to generate these messages?
> 
> I suspect the problem is that the page contains non-secure URLs to 
> such things as images and style sheets that are loaded by the browser 
> in order to render the page.
> 
> If your page is https://www.domain.ac.uk/index.html and it contains 
> <img src='http://www.domain.ac.uk/image.jpg'>
> you'll get the warning.

I think you're right. It's a web application I'm running over SSL and it has lots of dynamically
generated HTML and I thought I had nailed all the variables in the templates that we http
hard-coded but evidently not the one for images paths!

Thanks

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message