SSL Problems - Did I Fix It?

[kishy]

Good morning,

I've just monkeyed with a couple settings in pursuit of the mixed content HTTP/HTTPS problem. Testing in multiple web browsers including in private browsing mode seems to suggest I might have fixed the problem (where the website just loads as text, missing all the styling and some images).

Please confirm if things are working as you usually expect, or seemingly better, or worse.

This thread is subject to sudden deletion if I become satisfied with feedback or other indications that things are working.

Cheers.

[Arquemann]

I certainly can't replicate it anymore. Also noticed that the little logo for the open tab and bookmark is the vB logo instead of the GMN tire tread logo. Related?

[kishy]

I certainly can't replicate it anymore. Also noticed that the little logo for the open tab and bookmark is the vB logo instead of the GMN tire tread logo. Related?

Probably/maybe?
I haven't had the tire tread logo in years, myself, so I'm guessing your browser was holding onto it in cache. I'll see if I can figure that out. I believe it usually gets pulled from an icon file in the root of the website.

[Arquemann]

Probably/maybe?
I haven't had the tire tread logo in years, myself, so I'm guessing your browser was holding onto it in cache. I'll see if I can figure that out. I believe it usually gets pulled from an icon file in the root of the website.

I got the tire tread logo after the big forum update, before that it had been the vB logo.

[DerekTheGreat]

Welp, the site is displaying normally for me right now. Here's hoping it stays that way. Sometimes it would, other times I'd get what I guess is the mobile format.

[sly]

I certainly can't replicate it anymore. Also noticed that the little logo for the open tab and bookmark is the vB logo instead of the GMN tire tread logo. Related?

FavIcon file probably changed in the update. I can change that back. Not an issue.

[gadget73]

Its hit and miss for me. Some pages it shows all is happy, other pages I get the warning message that some content such as images is not secure. Maybe signatures or the header image?

quick poke indicates Sly's donor badges are not on an HTTPS link, but all the other stuff I checked on this particular page seems to be. Wonder if we can do a .htaccess re-write thing to force http requests to https in that folder.

[sly]

I'm having issues with login. Have to use private browser to login now. No matter of clear data fixes it. No clue what's up. I'll check the cookie settings when I get a chance unless someone else beats me to it. Seems to affect any browser I'm using. Chrome at work, Firefox at home.

Correction, Chrome works after manually clearing all site data and reloading. No clue wtf is up with Firefox at home.

[kishy]

Its hit and miss for me. Some pages it shows all is happy, other pages I get the warning message that some content such as images is not secure. Maybe signatures or the header image?

quick poke indicates Sly's donor badges are not on an HTTPS link, but all the other stuff I checked on this particular page seems to be. Wonder if we can do a .htaccess re-write thing to force http requests to https in that folder.

Personally I'd be OK with the occasional mixed content thing, so long as it's not like...the stylesheet refusing to load.
Everyone who has recently said "man, GMN seems a lot harder to use now" is probably trying to log in and use it without the stylesheet loaded which just makes it hell to look at and use.

Main goal at the moment is regaining the users who stopped coming because the plain text no-CSS vbulletin was a mess. At least from my perspective, anyway.

I'm having issues with login. Have to use private browser to login now. No matter of clear data fixes it. No clue what's up. I'll check the cookie settings when I get a chance unless someone else beats me to it. Seems to affect any browser I'm using. Chrome at work, Firefox at home.

Correction, Chrome works after manually clearing all site data and reloading. No clue wtf is up with Firefox at home.

Clearing site data should have done it, I'd think. Just for fun, try a ctrl+F5 in Firefox, which is supposed to refresh and ignore cached site data. Obviously if the site data stopped existing from being cleared this shouldn't make a difference, but hey, things get weird sometimes.

[sly]

I did try that. I've now tried wiping firefox and reinstalling it clean and it still won't login to GMN without a private browser. Gonna see if it's one of the extensions being a dick.

[sly]

Nope... none of that worked either. NFC. I'll just use private for now.

[sly]

I figured it out. HTTP isn't forwarded to HTTPS... now that HTTPS works, it won't let me login on the plain site. I guess we'll need to redirect to HTTPS?

[gadget73]

yea I just ran into that too, it loaded up the http site and the login did nothing. Manually went to the https and it worked fine. I think we're going to need a re-direct or whatever to make any http requests forward to the https

[kishy]

Uh...yes, ok, so something is odd about that.
My bookmark points to http and the site loads over http. It seems to work just fine, not sure why yours doesn't.
After doing anything on the http-loaded site, it (vbulletin itself) redirects itself to https based on the setting I changed, and the https site also works fine. This is what was breaking before, because an https-loaded site cannot display http-loaded content without browser setting tweaks.

Redirect is probably needed, but it's not entirely clear to me why it's giving you issues loading it by http to begin with, since it does work for me.

[sly]

That is weird. I'm going to blame it on Windows.