The following site: https://www.marijuanadoctors.com - is showing a partial encryption error in firefox and chrome (haven't looked in IE yet).

I've gone through the site for hours now, and can't find the offending code. I've checked both the source and HttpFox, and everything seems to be loading via HTTPS....

Any thoughts? This is frustrating me. Please someone help!

http://marijuanadoctors.transio.net/templates/mcn/images/marijuana-doctors.gif

Where'd you find that, Chris?

I think I found another one:

http://www.marijuanadoctors.com/templates/mcn2/images/connect/twitter.png

Where?

as the above have suggested its due to "non" encrypted data for images / data thats not heald on the domain the certificate is for..

For example:
If you have a ssl cert for bob.mydomain.com

you can ONLY encrypt data correctly for bob.mydomain.com

Gee, lynx, thanks for the useless feedback. What I NEED to know is WHICH images are unencrypted and WHERE they're specified. As I stated in my original post, I've been through the site 100 times and haven't found a single http:// element. I've also grepped the entire folder, HttpFoxed it, and exhausted about every resource I have... there is not a single http:// reference in the site - including the two listed above (again, not sure where you guys are getting those from unless you can tell me where)... so please tell me something I don't already know. Thanks.

These are the full errors I get..


marijuanadoctors.transio.net/templates/mcn/images/marijuana-doctors.gif:-1Resource interpreted as image but transferred with MIME type text/html.
www.marijuanadoctors.com/templates/mcn2/stylesheets/fonts/avant-garde-book-webfont.woff:-1Resource interpreted as font but transferred with MIME type application/octet-stream.
www.marijuanadoctors.com/templates/mcn2/stylesheets/fonts/avant-garde-demi-webfont.woff:-1Resource interpreted as font but transferred with MIME type application/octet-stream.
The page at https://www.marijuanadoctors.com/ displayed insecure content from http://www.marijuanadoctors.com/temp...ct/twitter.png.

3

The page at https://www.marijuanadoctors.com/ displayed insecure content from http://marijuanadoctors.transio.net/...na-doctors.gif.




Use google chrome and the element inspector to see for yourself.


THESE TWO!!
Need changing so they load from your base SSL url!

The page at https://www.marijuanadoctors.com/ displayed insecure content from http://www.marijuanadoctors.com/temp...ct/twitter.png.

3

The page at https://www.marijuanadoctors.com/ displayed insecure content from http://marijuanadoctors.transio.net/...na-doctors.gif.

Thanks for the help lynxus.... I can see those quite well myself in element inspector...

So... where are they in the CODE? (Answer: nowhere... which explains the mystery).

Originally Posted by smoseley

Where'd you find that, Chris?

Using the "Page Info" in FireFox (click the "favicon" and "More Information..." button.

Then click on the "Media" icon and you can sort the images by their path.

Well I fiound the twitter logo... it's pulling from the Facebook feed. (odd a browser would count iframe content as part of your page... but whatever). That still didnt' fix it though. Can't find that gif anywhere and i'm just tired of looking so i give up, on to the next thing.

Bad boy, just giving up

And bad for your client... Just use a program that searches all files.

Perhaps you didn't read my initial post... I already grepped the entire project and found nothing... it's not in my code.

FYI - the SSL failure was because of the Facebook Activity Feed component. Even though it was being loaded HTTPS, it had some content that was not encrypted.

Now our only remaining non-SSL bit is the Google Maps component... but they expect us to PAY for https??? WTF? MapQuest here we come!!!