HBC Website not displaying properly via HTTPS due to recent SSL implementation

[caddisguy]

I see the problem now.

Historically HBC did not have an SSL certificate and as such, the web server was never listening on port 443 for HTTPS connections.

I see that on October 11th an SSL certificate was generated on the server through cPanel and the server now accepts HTTPS connections on 443. However, the page does not display correctly because:

Reviewing the source code, I see that the JavaScript / CSS is included through hard linked using "http://". For example:


type="text/css" href="http://www.huntingbc.ca/forum/css.php?styleid=6&langid=1&d=1417480928&am p;td=ltr&sheet=additional.css


The browser will not allow insecure items (ie: items loaded via HTTP) to be displayed when you are visiting the site through HTTPS (ie: https://huntingbc.ca)

Rather than hard linking using http:// and FQDN, it should be linked like this:

type="text/css" href="/forum/css.php?styleid=6&langid=1&d=1417480928&am p;td=ltr&sheet=additional.css

(If the application automatically adds the http://www.huntingbc.ca because it grabs it from a database or some other setting, that setting will need to be changed to https://www.huntingbc.ca)

The browser will then automatically assume the https://huntingbc.ca OR http://huntingbc.ca based on whichever was used when the visitor originally landed on the page.


A work-around for those affected is to type in "http://huntingbc.ca" into their browser. If you just type in "huntingbc.ca" most modern web browsers (newer versions of Chrome) will automatically try https:// first, so the site will load with the broken CSS / theme / image links due to the issue I described.

Note that you will even see this in Firefox IF you add the https prefix, ie: https://huntingbc.ca ... Also, the broken HTTPS instance of the website will end up getting indexed and preferred by search engines, so soon all traffic from search engines will hit the broken page.

This is definitely a site issue and is a result of that SSL certificate being installed on October 11th.

Marc will need to reach out to his webmaster to either revert that change that was made October 11 or fix all of the insecure links that are hard coded within the site.

I am happy to assist the webmaster in any way. Don't hesitate to reach out via PM.

[HarryToolips]

I was wondering what changed, thanks for clarifying that... I tried what you said, still didn't work for me...I hope they get it fixed soon, very irritating trying to post on any thread or PM...cheers.

[caddisguy]

I was wondering what changed, thanks for clarifying that... I tried what you said, still didn't work for me...I hope they get it fixed soon, very irritating trying to post on any thread or PM...cheers.

Yeah it seems some browsers will still try https:// even when you type http://

Marc will need to reach out to the webmaster to either revert the SSL certificate installation that occurred on the 11th or fix all the embedded http:// links that prevent content from loading while using https://

Happy to help if needed. I do this stuff for a living and work with Linux / Apache / cPanel etc on a daily basis. No charge

[MB_Boy]

There is a work around that Whonnock posted in the thread about laptop not displaying properly. Page 4.

[caddisguy]

There is a work around that Whonnock posted in the thread about laptop not displaying properly. Page 4.

That will work for some. I'll quote it here in this thread for people to see:

"In the google search bar there is a little padlock on the left side. Click on it and go to site settings. You have to be at the huntingbc home page, bIn the google search bar there is a little padlock on the left side. Click on it and go to site settings. You have to be at the huntingbc home page, but not necessarily logged in. In the new page scroll down to 'insecure content' and allow. When logging back in, if needed, it will advise that your entering an insecure site and will ask if you want to send the information any ways.ut not necessarily logged in. In the new page scroll down to 'insecure content' and allow. When logging back in, if needed, it will advise that your entering an insecure site and will ask if you want to send the information any ways." - Whonnock Boy

^^^ This will tell the browser to load those embedded http:// links.

Older browsers used to throw a pop-up that asked if you would "like to display secure and insecure items" but most newer ones just default to silently not displaying the content

[high horse Hal]

" You have to be at the huntingbc home page, bIn the google search bar there is a little padlock on the left side. Click on it and go to site settings. You have to be at the huntingbc home page, but not necessarily logged in. In the new page scroll down to 'insecure content' and allow. When logging back in, if needed, it will advise that your entering an insecure site and will ask if you want to send the information any ways."

that worked, thanks

[Arctic Lake]

I tried to look at Hunting BC on my laptop the other day . It looked prehistoric ! Sorry have not read the above replies . Hope it’s an easy fix !
Arctic Lake

[MB_Boy]

I tried to look at Hunting BC on my laptop the other day . It looked prehistoric ! Sorry have not read the above replies . Hope it’s an easy fix !
Arctic Lake

Try doing what Whonnock posted in post #39 in this thread.

http://www.huntingbc.ca/forum/showth...n-laptop/page4

[Arctic Lake]

Thank You I’m usually on here with my iPad but when I posted pictures of my moose hunt I tried doing it from my laptop and saw the wired home page and said OhOh
Arctic Lake

Try doing what Whonnock posted in post #39 in this thread.

http://www.huntingbc.ca/forum/showth...n-laptop/page4

[guntech]

I can not navigate my android phone to see HBC...too complicated for me...

No problem with my computer at home though, no changes ... so just no viewing while away from home now ... no big deal...