Elxis CMS Forum

Support => Security => Topic started by: amnimaken on July 01, 2017, 04:51:13

Title: Website uses 3rd party resources are not protected via SSL certificate?
Post by: amnimaken on July 01, 2017, 04:51:13
Hello,

I successfully installed the SSL certificate on site https://gudauri.travel. Tests show that the certificate is installed correctly (https://www.sslshopper.com/ssl-checker.html).

All links of the type http:// changed to https://, but the warning about the not fully secure connection is still displaying.

Answer from certificate support:

"SSL certificate is properly installed on your website. However, the website uses 3rd party resources that are not protected. Please change all HTTP:// to HTTPS:// in the source code of your website".

Advise, please
Title: Re: Website uses 3rd party resources are not protected via SSL certificate?
Post by: Amigamerlin on July 01, 2017, 09:19:47
Hello, I got the same problem now solved  ;).

My problem was that the some linked images was http and not https.

You need to deeply check

I solved replacing http with https in raw mode inside db.
How to do:

1) Dump mysql db and store it in a secure place in case of problem;
2) Dump mysql db again;
3) Open it with a pure txt editor (ex: notepad++ or pspad for windows - pluma or notepadqq for Ubuntu linux)
4) Search and replace http with https
5) Save modified DB
7) Restore modified db

Remember that ALL source url must be HTTPS even what is contained inside .js script file that download resource from other sites (3rd party resource).
You have to check them all.
I suggest to try to disable one by one all the script you included to spot the one that cause the problem.
Once found you need to patch it to get resource in https (Sometime resource are only available in http and then you can't solve the problem  :( ) 

Let me know.
Title: Re: Website uses 3rd party resources are not protected via SSL certificate?
Post by: Amigamerlin on July 01, 2017, 09:56:58
just do a quickly check ...

Check pages that contain “https://gudauri.travel/media/images/oteli-v-gudauri.jpg” image

Moreover you have some script (meteo) that call resource url not https like  “http://meteo.gov.ge/images/loading.gif” and  “http://meteo.gov.ge/cam_jpg/gudauri//17070110471600.jpg”.
Title: Re: Website uses 3rd party resources are not protected via SSL certificate?
Post by: amnimaken on July 03, 2017, 11:59:36
Hi Amigamerlin,

Thanks a lot for the advice and detailed description of the solution!

This was useful, the problem is solved.
Title: Re: Website uses 3rd party resources are not protected via SSL certificate?
Post by: Amigamerlin on July 03, 2017, 14:51:23
Hi Amigamerlin,

Thanks a lot for the advice and detailed description of the solution!

This was useful, the problem is solved.

Hi,
I'm happy that I was useful to solve the problem  :).
Bye