OMG, SSL insecure nightmare, how to fix easy way?

nayll · March 7, 2014

OK, so I'm getting the shopping cart ironed out. PS 1.5.6.1 dedicated IP, dedicated SSL cert

SSL cert installed and tests all good by independant 3rd party even made a real purchase through checkout and authorize.net.

etc.etc.

no green padlock but a grey exclimation point on any https page (account-checkout). not good. I finally find this awesome site

http://www.whynopadlock.com/

I test the first page of the checkout and this is what it returned, 22 unsecure calls.

I've looked into many files mentioned and they all seem to have relitive image calls but stuff like google fonts are listed.

any ideas on how to get a green padlock without having to wade through every line of code in dozens of files? major f'n pain

NemoPS · March 7, 2014

It's because of the theme you use. You need to change all the occurrences of $base_dir to $base_dir_ssl in the template files, by searching the insecure files.

nayll · March 7, 2014

OK, i tried to find that code string in the global.css file of the theme, it was nowhere to be found. or in any .php .tpl.css file in the root folder of the third party theme using GREP 2.3 to search the text string "$base_dir" nothing anywhere in any of those files.

So I tried to just manually change some of the offending image files in global.css.

the image references were written with relative link in the global.css which should not have been a problem

So I hard coded the last 4 image references in global.css anyway that the test said were insecure.

This was the typical relitive path ../img/bg_form_h3.png

etc.

changed them to

https://nayll.com/themes/theme474/img/bg_form_h3.png

etc.

cleared SMARTY cache But the test still came back with http path

Insecure URL: http://nayll.com/themes/theme474/img/bg_form_h3.png
Found in: https://nayll.com/themes/theme474/css/global.css

Insecure URL: http://nayll.com/themes/theme474/img/icon/info.png
Found in: https://nayll.com/themes/theme474/css/global.css

Insecure URL: http://nayll.com/themes/theme474/img/bg_bt_compare.gif
Found in: https://nayll.com/themes/theme474/css/global.css

Insecure URL: http://nayll.com/themes/theme474/img/bg_input.png
Found in: https://nayll.com/themes/theme474/css/global.css

what is also weird is that the test says these .css files are insecure but when i look into them they are 0kb and empty files in their respective folders?

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockviewed/blockviewed.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockspecials/blockspecials.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockuserinfo/blockuserinfo.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockmyaccountfooter/blockmyaccount.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/favoriteproducts/favoriteproducts.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blocknewsletter/blocknewsletter.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/productcomments/productcomments.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/productscategory/productscategory.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockcms/blockcms.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockcart/blockcart.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blocklanguages/blocklanguages.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blocktopmenu/css/superfish-modified.css
Found in: https://nayll.com/login?back=my-account

any other ideas????

NemoPS · March 8, 2014

No base_dir? That's weird, there should be a couple at least. If you can't find them in any tpl file of the default theme, for sure the search is not working as it should, as there are some occurrences!

nayll · March 8, 2014

Yes there were a dozen or so, the GREP search did not like the $ in front of the string. Found all of them in the theme474, changed all of them, uploaded, recompiled, nothing changed, all the same insecure errors.???

I gave all the offending images an https: path, didn't fix those errors

The order page makes all these calls to module .css files that are 0kb (empty) How could these files be empty?? all of them in the

theme474/css/modules/... empty css files

any ideas, I'm totally out of them!

jh

nayll · March 10, 2014

any input?, I'm still scratching my head.

jh

NemoPS · March 10, 2014

Some files might be empty, because it's sometimes necessary to override core css rules with empty file and prevent the default styles to take over the custom ones

So you still get insecure errors? On which images/files?

nayll · March 10, 2014

this is the list, it is basically the same for all the https: pages in presta.

Total number of items: 158
Number of insecure items: 23

was able to knock it down to 15 bad items, the stuff that is crossed out is what went away.

these are fonts called, found them, gave them a https and they went away

Insecure URL: http://fonts.googleapis.com/css?family=Playfair+Display
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://fonts.googleapis.com/css?family=Open+Sans+Condensed:300
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://fonts.googleapis.com/css?family=Open+Sans
Found in: https://nayll.com/login?back=my-account

These are all empty .css files, not sure how to tackle these, they keep coming up as insecure!

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockviewed/blockviewed.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockspecials/blockspecials.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockuserinfo/blockuserinfo.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockmyaccountfooter/blockmyaccount.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/favoriteproducts/favoriteproducts.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blocknewsletter/blocknewsletter.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/productcomments/productcomments.css
Found in: https://nayll.com/login?back=my-account

somehow this one below went away

Insecure URL: http://nayll.com/themes/theme474/css/modules/productscategory/productscategory.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockcms/blockcms.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blockcart/blockcart.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blocklanguages/blocklanguages.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://nayll.com/themes/theme474/css/modules/blocktopmenu/css/superfish-modified.css
Found in: https://nayll.com/login?back=my-account

Insecure URL: http://themes.googleusercontent.com/static/fonts/playfairdisplay/v8/2NBgzUtEeyB-Xtpr9bm1Cczai8e7xzqnKiVb1EwOy0E.ttf
Found in: http://fonts.googleapis.com/css?family=Playfair+Display

Insecure URL: http://themes.googleusercontent.com/static/fonts/opensanscondensed/v7/gk5FxslNkTTHtojXrkp-xD1GzwQ5qF9DNzkQQVRhJ4g.ttf
Found in: http://fonts.googleapis.com/css?family=Open+Sans+Condensed:300

Insecure URL: http://themes.googleusercontent.com/static/fonts/opensans/v8/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
Found in: http://fonts.googleapis.com/css?family=Open+Sans

nayll · March 12, 2014

SOLVED, developer finally took care of it, don't know what they did though.

magpole · December 24, 2014

I fixed the error on computer by adding the "true" in blocksearch-top.tpl .

But don't know how to fix the mobile side.

Although, I did same thing in blocksearch-top.tpl under mobile theme.

Using: prestashop 1.4.11

mobile theme module by prestashop

Please help

Thanks

Sign In

OMG, SSL insecure nightmare, how to fix easy way?

Recommended Posts

nayll

Link to comment

Share on other sites

NemoPS

Link to comment

Share on other sites

nayll

Link to comment

Share on other sites

NemoPS

Link to comment

Share on other sites

nayll

Link to comment

Share on other sites

nayll

Link to comment

Share on other sites

NemoPS

Link to comment

Share on other sites

nayll

Link to comment

Share on other sites

nayll

Link to comment

Share on other sites

magpole

Link to comment

Share on other sites

Create an account or sign in to comment

Create an account

Sign in

Browse

Activity

Go back to prestashop.com