Missing SSL url for external ressources

[welrachid]

The VM dashboard loads in some ressources from an external which in my opinion doesnt make sense. Can you please fix this?? More than that, the ressources loaded are missing SSL which also seems wierd.

url: /administrator/index.php?option=com_virtuemart&view=virtuemart
VM: 3.2.4
J: 3.8.2

also cannot uploade screenshot..
The attachments upload directory is not writable. Your attachment or avatar cannot be saved.

[Milbo]

The screenshot problem is fixed. which ressources do you mean in special?

[welrachid]

Hi Mibo
http://extensions.virtuemart.net//components/com_virtuemart/assets/images/vmgeneral/no-product-image.png
is loaded from a NON-SSL site, into our backend which is located on SSL

and this is done even though https://extensions.virtuemart.net/ does have SSL enabled.


btw the external ressources that are loaded in are "latest news" and the images from latest extensions etc. Can this be disabled somewhere?

[Milbo]

I fixed it now. The reason was that we still used simplepie as feed library, which throwed an SSL error. The same for Firefox btw, it is really interesting. Use the link directly with https on firefox and you will see that FF says the page is not secure, but chrome says it is secure. Chrome on the other hand just shows the sourcecode.

https://extensions.virtuemart.net/?format=feed&type=rss respectivly https://virtuemart.net/news/list-all-news?format=feed&type=rss

So curl reacts here like FF. The reason is, that the protocoll rss1.0 was not defined for SSL, so it stops. So I could not set the URL with SSL protocol. The new core uses now the standard feed library of joomla. So no more mixed content.