By somatics on

I just added an SSL certificate (GeoTrust Extended Validation SSL) to our website, and it showed up correctly (green bar, no errors reported, etc.) on Mac & Windows Safari, Firefox, and Chrome.

However, on Internet Explorer 8 on Windows XP & Windows 7, I get the following warning:


Security Warning

Do you want to view only the webpage content that was delivered securely?

This Webpage contains content that will not be delivered using a secure HTTPS connection, which could compromise the security of the entire webpage.

Yes | No

I don't understand what would be delivered on the pages that isn't secure. The pages are just text and a few graphics, all of which is delivered in the form a theme I created using the Zen theme/template. So, I'm assuming Drupal is doing something to serve up the page partially via HTTP and partially via HTTPS, but I can't figure how or why.

Also, when I choose Yes to only view the web content delivered securely, it still seems to deliver the whole webpage.

I installed the Secure Pages module and still got the same warning.

This comes up from the very first page, and I think will likely now make a large population go away before they even enter!

Does anyone know what the problem is or how to fix it?

⋅ Categories: Drupal 5.x

Comments

stevenc’s picture

stevenc commented

This is happening because the page you are accessing is using SSL protocol (https://www.site.com) BUT something in the page's content is hard-coded to a non-secure URL.

For example, you may have an image tag like:

<img src="http://www.site.com/images/logo.png">

The image is trying to load from a non-secure URL (http). This is causing the warning, because you are now mixing secure and non-secure content.

Note that any kind of referenced content can cause this problem (JavaScript and CSS includes, images, flash movies, etc.)

---------------------------------
Steven Wright

Slalom

veracium’s picture

veracium commented

I have created Secure Image module to address this issue. It is currently being reviewed.

vorbian’s picture

vorbian commented

Check out http://drupal.org/node/548858 for some possible ways to fix this issue