Help needed with weird SSL problem

[Cristiano]

So I recently installed ssl certs on both the server for snapzilla.net and also images.snapzilla.net (images are served by a different site). Everything seemed to work fine - if you go directly to an image url with https:// the images show fine, the snapzilla.net site auto-redirects to Snapzilla - Postcards From Life #2. Mixed content checker sites find nothing wrong. I replaced all of the images.snapzilla.net urls with https:// on Snapzilla. However, when I go to the site in Chrome, Firefox and Safari on my iPad, they all say the site is insecure. The console in Chrome and Firefox references the http:// url for the images, but in the source of the page, the urls are all https:// for the src attribute on the img tags. I can't for the life of me figure out wtf is wrong, and it's making me crazy. Any ideas?

Example url:

https://images.snapzilla.net/i/609/849/609849.jpg

html src:

<img src="https://images.snapzilla.net/images/609849.jpg?width=1200" alt="" class="img-responsive">

Error message:

Loading mixed (insecure) display content “http://images.snapzilla.net/i/609/849/609849.jpg?width=1200” on a secure page

There is no reference anywhere to the http:// url.

Help!

 

[Free]

Weird.

Chrome reports the certificate is valid, etc. but Firefox claims the site isn't encrypted and won't even show information on the certificate. These two different messages from the two browsers leads me to suspect the cert isn't configured correctly, but I can't explain how.

 

[Essence Lumin]

Your snapzilla server is doing a redirect.

wget --max-redirect=0 --log=log.txt https://images.snapzilla.net/images/609840.jpg

cat log.txt

--2020-04-28 21:33:16-- https://images.snapzilla.net/images/609840.jpg
Resolving images.snapzilla.net (images.snapzilla.net)... 205.185.120.153
Connecting to images.snapzilla.net (images.snapzilla.net)|205.185.120.153|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://images.snapzilla.net/i/609/840/609840.jpg [following]
0 redirections exceeded.

 

[Free]

Just dropped the domain in a few SSL checkers, both reported the cert is installed correctly.

 

[Cristiano]

Your snapzilla server is doing a redirect.

wget --max-redirect=0 --log=log.txt https://images.snapzilla.net/images/609840.jpg

cat log.txt

--2020-04-28 21:33:16-- https://images.snapzilla.net/images/609840.jpg
Resolving images.snapzilla.net (images.snapzilla.net)... 205.185.120.153
Connecting to images.snapzilla.net (images.snapzilla.net)|205.185.120.153|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://images.snapzilla.net/i/609/840/609840.jpg [following]
0 redirections exceeded.

OMG I WANT TO MARRY YOU!

Thank you thank you thank you! I completely forgot there is an image handler that was taking a url like snapzilla.net/images/100246.jpg and redirecting it to where the image is actually stored (snapzilla.net/i/10/246/100246.jpg). That code had an http:// redirect in it - I changed it to https:// and it is all fixed.

 

[Free]

OMG I WANT TO MARRY YOU!

Once the ceremony is over and the redirect is resolved, note that individual image pages have a number of http:// references, such as the snapz.me links, Second Life maps and Plurk.

 

[Cristiano]

Once the ceremony is over and the redirect is resolved, note that individual image pages have a number of http:// references, such as the snapz.me links, Second Life maps and Plurk.

Links won't cause mixed content errors.

 

[Free]

Links won't cause mixed content errors.

Sorry, of course they don't. That was just my anal side needing everything that's https to be https (though it usually doesn't, but you know, anal side).