AbanteCart Community

Shopping Cart Operations => Support => General Support => Topic started by: pandawdy on August 11, 2013, 05:51:12 PM

Title: SSL doesn't show agreen bar
Post by: pandawdy on August 11, 2013, 05:51:12 PM

I have HTTPS working fine on my store. It shows HTTPS in the URL bar, but it doesn't show up green, which I believe means that only parts of the pages are SSL and other parts are not.

After doing a little research, I believe this is due to parts of the page being fetched without without using https. How can this be fixed?

Title: Re: SSL doesn't show agreen bar
Post by: abantecart on August 11, 2013, 06:05:34 PM

Can you please post URL to the page at problem? I will check this for you

Title: Re: SSL doesn't show agreen bar
Post by: pandawdy on August 11, 2013, 07:03:25 PM

http://www.chadmarshall.net/store/

If you put anything in the cart and start checkout, you'll see the https show up in the URL bar. But it won't be green until the point of going over to PayPal to pay for it.

I do have a valid SSL certificate installed.

Title: Re: SSL doesn't show agreen bar
Post by: abantecart on August 11, 2013, 07:33:56 PM

I see some unsecured files loaded in your HTML
Example:

Code: [Select]

<script type="text/javascript" src="http://forms.aweber.com/form/47/943863547.js"></script> 

This can cause issues. Change to https

Title: Re: SSL doesn't show agreen bar
Post by: pandawdy on August 11, 2013, 07:46:09 PM

I removed the Aweber form completely, but it still doesn't show green.

When I enabled SSL, was there anything other than turning it on that I needed to do? Under system settings I just clicked the button ON. That's all I did.

Title: Re: SSL doesn't show agreen bar
Post by: pandawdy on August 11, 2013, 07:58:21 PM

Ok I did get it showing fully encrypted, but had to remove the Language option from all pages. Not a big deal because I don't offer other languages. The flag icon on the language option drop down was being fetched from http, not https.

But it still doesn't show a green bar. Even though it says it's fully encrypted, not partially encrypted.

Title: Re: SSL doesn't show agreen bar
Post by: pandawdy on August 11, 2013, 08:24:46 PM

Sorry I think I figured out what the deal is.

The green bar is produced only with EV SSL, not normal SSL.

Title: Re: SSL doesn't show agreen bar
Post by: pandawdy on August 11, 2013, 09:53:22 PM

Is there some way to force Abantecart to do everything in SSL?

It seems to jump in and out randomly. For example, my customer log in page. Sometimes it's SSL, sometimes it's not.  If I try to log in during check out, it will go non SSL, throwing up security warnings.

Title: Re: SSL doesn't show agreen bar
Post by: abantecart on August 11, 2013, 10:10:54 PM

Security warning shows because of non HTTPS inclusion of the script that I a posted before.

Title: Re: SSL doesn't show agreen bar
Post by: pandawdy on August 11, 2013, 10:52:54 PM

I got it all taken care of. Thanks for the help.