News:

You may pay someone to create your store, or you visit our seminar and become a professional yourself with the silver certification

Main Menu

Missing SSL url for external ressources

Started by welrachid, November 23, 2017, 07:11:07 AM

Previous topic - Next topic

welrachid

The VM dashboard loads in some ressources from an external which in my opinion doesnt make sense. Can you please fix this?? More than that, the ressources loaded are missing SSL which also seems wierd.

url: /administrator/index.php?option=com_virtuemart&view=virtuemart
VM: 3.2.4
J: 3.8.2

also cannot uploade screenshot..
The attachments upload directory is not writable. Your attachment or avatar cannot be saved.
Best regards,
Wel

Milbo

The screenshot problem is fixed. which ressources do you mean in special?
Should I fix your bug, please support the VirtueMart project and become a member
______________________________________
Extensions approved by the core team: http://extensions.virtuemart.net/

welrachid

Hi Mibo
http://extensions.virtuemart.net//components/com_virtuemart/assets/images/vmgeneral/no-product-image.png
is loaded from a NON-SSL site, into our backend which is located on SSL

and this is done even though https://extensions.virtuemart.net/ does have SSL enabled.


btw the external ressources that are loaded in are "latest news" and the images from latest extensions etc. Can this be disabled somewhere?
Best regards,
Wel

Milbo

I fixed it now. The reason was that we still used simplepie as feed library, which throwed an SSL error. The same for Firefox btw, it is really interesting. Use the link directly with https on firefox and you will see that FF says the page is not secure, but chrome says it is secure. Chrome on the other hand just shows the sourcecode.

https://extensions.virtuemart.net/?format=feed&type=rss respectivly https://virtuemart.net/news/list-all-news?format=feed&type=rss

So curl reacts here like FF. The reason is, that the protocoll rss1.0 was not defined for SSL, so it stops. So I could not set the URL with SSL protocol. The new core uses now the standard feed library of joomla. So no more mixed content.
Should I fix your bug, please support the VirtueMart project and become a member
______________________________________
Extensions approved by the core team: http://extensions.virtuemart.net/