Jump to content

Ssl Broken On Default Instalation And Theme


Recommended Posts

Hello, i just install prestashop on my server with SSL certificate. When i try to use the "enable SSL on all pages" option on the admin panel and i click on the link to check if the host support SSL, the site switch to https, but i notice the SSL icon is broken, and the enable SSL button still gray. If i check in the developer console in chrome, i see several errors about images loaded over HTTPS, but requested as an insecure image from.'http://profile.prestashop.com (i think that is my profile image on prestashop website). There are some more errors about images loaded from prestashop sites over http:

Mixed Content: The page is loaded over HTTPS, but requested an insecure image 'http://gamification....adgeImg/1/1.png'. This content should also be served over HTTPS.

etc, etc.

Is this means the default site and theme has some image links to prestashop websites hardcoded?

 

Is there a way to fix it, or do i need to search in the code for hardcoded links and fix them by hand?

 

Thanks in advance.

Link to comment
Share on other sites

Thanks for the reply. I will search and fix the harcoded links. By the way is confusing for new users that the default code and theme are not ready to support SSL out of the box. Maybe can be reported as a bug or feature request and fixed on the next release :).

 

Thank you for your help.

Link to comment
Share on other sites

Well. After an extensive serach on the code i did not find any hardcoded URL's regarding to this problem. So te answer to fix this issue is not on the code. After testing diferrent ways to fix this issue at code level i try a different aproach that works for me; this is my solution:

 

1) Activate SSL directtly on the database, (because the broken images avoid to use the activate SSL option on the admin panel, click on the url simply does not pass the test). To ativate SSL on the database i use the next query on:

 

UPDATE og_configuration SET value = 1 WHERE name = 'PS_SSL_ENABLED';

 

2) Add the next line to the .htacces file to avoid teh loop redirect issue with SSL enabled:

 

SetEnv HTTPS On

 

Voila! SSL enabled :)

 

I hope this helps someone else who face the same problem.

Edited by octagesimal (see edit history)
Link to comment
Share on other sites

seems to me that you failed to locate the code where your addons profile is downloaded from.  an alternative would be to disconnect your addons profile in the back office, since connecting to the addons profile appears to be insecure when SSL is being activated.

 

By going directly to the database to enable SSL, you forced it enabled without allowing Prestashop to check if the server properly supports it.  that may work in your environment, but I would not suggest others follow that approach...

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...