IE 'mixed content' (SSL) warnings

[mayuresh]

Hello

Thanks to help on this forum I now have Alfresco working with Apache & Tomcat, with a self-signed certificate. I'm using 3.2 community build downloaded last week (w/c 05 Oct. 09)

The clients who will be using this installation all use IE and I'm struggling to get IE to not show the 'mixed content' alert on every single page. I've tried the following so far with no success:

• 'JkExtractSSL' statement in my httpd.conf


• Disable IE mixed content warnings (even added my site as a 'safe' site within IE)

I've also used Charles (http://www.charlesproxy.com) to watch my browser traffic and I can't see any signs of my installation contacting the mother ship for logos, etc. – which I know is well documented elsewhere.

Any clues as to why I'm getting these mixed content warnings and how I might be able to disable them?

[tonyc]

It look as though you are using apache httpd server as a proxy.  Are you using SSL on httpd or tomcat?  I would make sure that you are using SSL over tomcat and disable apache for troubleshooting.  See if your warning is popping up with just tomcat over ssl.   My guess is that you have a problem with your apache/tomcat/ssl configuration.  Try narrowing it down.

Also there are numerous problems with some javascript / css that can cause such problems you may want to look into that as well.

Hope that helps.  Good Luck

[mayuresh]

Thanks for your reply. I meant to post earlier to say that it's working fine now - and I have no idea why or how. I have a feeling it's to do with 'JkExtractSSL' and the fact that I hadn't restarted all of the services as I clearly should have done, but that's just a hunch at the moment.

The next challenge is to get a CA signed certificate so my browser stops flashing red all the time, which I don't mind but have a feeling the clients won't like.

Thanks again, it's much appreciated.

[tonyc]

Glad to hear you resolved it.  It is a shame that you have to make such an investment to a verisign in order for modern browsers to not scare the crap out of end users.  I wish there was a trust network you can subscribe too that didn't charge up to $1000 for a cert.  Anyways, happy alfrescoing