Help needed with weird SSL problem

Cristiano

Full Frontal Nerdity
Admin
Joined
Sep 19, 2018
Messages
3,413
SL Rez
2002
Joined SLU
Nov 2003
SLU Posts
35836
So I recently installed ssl certs on both the server for snapzilla.net and also images.snapzilla.net (images are served by a different site). Everything seemed to work fine - if you go directly to an image url with https:// the images show fine, the snapzilla.net site auto-redirects to Snapzilla - Postcards From Life #2. Mixed content checker sites find nothing wrong. I replaced all of the images.snapzilla.net urls with https:// on Snapzilla. However, when I go to the site in Chrome, Firefox and Safari on my iPad, they all say the site is insecure. The console in Chrome and Firefox references the http:// url for the images, but in the source of the page, the urls are all https:// for the src attribute on the img tags. I can't for the life of me figure out wtf is wrong, and it's making me crazy. Any ideas?

Example url:


html src:
Code:
<img src="https://images.snapzilla.net/images/609849.jpg?width=1200" alt="" class="img-responsive">
Error message:

Loading mixed (insecure) display content “http://images.snapzilla.net/i/609/849/609849.jpg?width=1200” on a secure page

There is no reference anywhere to the http:// url.

Help!
 

Free

Antifa-tigued
VVO Supporter 🍦🎈👾❤
Joined
Sep 22, 2018
Messages
18,285
Location
Moonbase Caligula
SL Rez
2008
Joined SLU
2009
SLU Posts
55565
Weird.

Chrome reports the certificate is valid, etc. but Firefox claims the site isn't encrypted and won't even show information on the certificate. These two different messages from the two browsers leads me to suspect the cert isn't configured correctly, but I can't explain how.
 
Joined
Sep 19, 2018
Messages
3,010
Location
Portland, OR
SL Rez
2003
SLU Posts
4494
Your snapzilla server is doing a redirect.

wget --max-redirect=0 --log=log.txt https://images.snapzilla.net/images/609840.jpg

cat log.txt

--2020-04-28 21:33:16-- https://images.snapzilla.net/images/609840.jpg
Resolving images.snapzilla.net (images.snapzilla.net)... 205.185.120.153
Connecting to images.snapzilla.net (images.snapzilla.net)|205.185.120.153|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://images.snapzilla.net/i/609/840/609840.jpg [following]
0 redirections exceeded.
 

Free

Antifa-tigued
VVO Supporter 🍦🎈👾❤
Joined
Sep 22, 2018
Messages
18,285
Location
Moonbase Caligula
SL Rez
2008
Joined SLU
2009
SLU Posts
55565
Just dropped the domain in a few SSL checkers, both reported the cert is installed correctly.
 
  • 1Agree
Reactions: Grandma Bates

Cristiano

Full Frontal Nerdity
Admin
Joined
Sep 19, 2018
Messages
3,413
SL Rez
2002
Joined SLU
Nov 2003
SLU Posts
35836
Your snapzilla server is doing a redirect.

wget --max-redirect=0 --log=log.txt https://images.snapzilla.net/images/609840.jpg

cat log.txt

--2020-04-28 21:33:16-- https://images.snapzilla.net/images/609840.jpg
Resolving images.snapzilla.net (images.snapzilla.net)... 205.185.120.153
Connecting to images.snapzilla.net (images.snapzilla.net)|205.185.120.153|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://images.snapzilla.net/i/609/840/609840.jpg [following]
0 redirections exceeded.
OMG I WANT TO MARRY YOU!

Thank you thank you thank you! I completely forgot there is an image handler that was taking a url like snapzilla.net/images/100246.jpg and redirecting it to where the image is actually stored (snapzilla.net/i/10/246/100246.jpg). That code had an http:// redirect in it - I changed it to https:// and it is all fixed.

:loveflag:
 

Free

Antifa-tigued
VVO Supporter 🍦🎈👾❤
Joined
Sep 22, 2018
Messages
18,285
Location
Moonbase Caligula
SL Rez
2008
Joined SLU
2009
SLU Posts
55565
OMG I WANT TO MARRY YOU!
Once the ceremony is over and the redirect is resolved, note that individual image pages have a number of http:// references, such as the snapz.me links, Second Life maps and Plurk.
 

Cristiano

Full Frontal Nerdity
Admin
Joined
Sep 19, 2018
Messages
3,413
SL Rez
2002
Joined SLU
Nov 2003
SLU Posts
35836
Once the ceremony is over and the redirect is resolved, note that individual image pages have a number of http:// references, such as the snapz.me links, Second Life maps and Plurk.
Links won't cause mixed content errors.
 

Free

Antifa-tigued
VVO Supporter 🍦🎈👾❤
Joined
Sep 22, 2018
Messages
18,285
Location
Moonbase Caligula
SL Rez
2008
Joined SLU
2009
SLU Posts
55565
Links won't cause mixed content errors.
Sorry, of course they don't. That was just my anal side needing everything that's https to be https (though it usually doesn't, but you know, anal side).