SSL Problem | myenv.php

[studiobl]

I'm having an ssl problem: broken padlock, alert boxes, the whole nine yards. I searched the forums and found the post from AlanR concerning using myenv.php to determine variables to apply to changes to application_top.php.

 

OK, I ran myenv.php and got this:

 

HTTP HOST: www.dipgear.com

Server Port: 443

SSL Status: on

Fowarded Server:

Fowarded Host:

Fowarded By:

 

Both getenv('SERVER_PORT') and getenv('HTTPS') and got responses. Since application_top.php line 41 is "$request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';" I shouldn't have had any problems in the first place, since getenv('HTTPS') on my server returns 'on'. Nonetheless, I changed line 41 to check SERVER_PORT for 443. Still getting the broken padlock.

 

What the heck is going on? My client is going nuts...I've got to get this fixed.

[pirosaint]

man we are two i can't get this this working...

 

is there any other way to test it???

 

i tried just the same thing as you did, and nothing..

my site is:

 

www.lightguy.com

 

thanks for your time..

 

nch

[AlanR]

man we are two i can't get this this working...

 

is there any other way to test it???

 

i tried just the same thing as you did, and nothing..

my site is:

 

www.lightguy.com

 

thanks for your time..

Look at the source view when you're in ssl. You've got http: source links to outside sites all over the place.

[studiobl]

Look at the source view when you're in ssl. You've got http: source links to outside sites all over the place.

 

I've been wondering about this: I'm working on a Mac, and have not been able to generate any of the alert boxes, just the broken padlock. One of my friends with a PC tried and got the "the site you are about to enter contains both secure and non-secure (or was that "insecure") data." That sounds like the image links, which are all http even on secure pages.

 

However, I changed the path variable in config.php (or whatever it's called) so that the root path for both secure and insecure pages starts with "https" and still got a broken padlock on secure pages. I even checked the source for image src paths and they all began with "https".

 

HOWEVER...we do have Google AdWord ads on the secure pages, and those certainly contain outside http links. Could this be the problem?

 

Anyone else have this issue? Is there a way to set up a Google AdWord account so that all the links begin with "https"?

[AlanR]

HOWEVER...we do have Google AdWord ads on the secure pages, and those certainly contain outside http links. Could this be the problem?

For sure...

 

Scroll to the bottom of this page:

 

http://www.oscommerce.info/kb/osCommerce/G...mon_Problems/75