Results 1 to 10 of 45

Thread: HBC Website not displaying properly via HTTPS due to recent SSL implementation

Threaded View

  1. #1
    Join Date
    Aug 2010
    Location
    Langley
    Posts
    6,105

    HBC Website not displaying properly via HTTPS due to recent SSL implementation

    I see the problem now.

    Historically HBC did not have an SSL certificate and as such, the web server was never listening on port 443 for HTTPS connections.

    I see that on October 11th an SSL certificate was generated on the server through cPanel and the server now accepts HTTPS connections on 443. However, the page does not display correctly because:

    Reviewing the source code, I see that the JavaScript / CSS is included through hard linked using "http://". For example:


    type="text/css" href="http://www.huntingbc.ca/forum/css.php?styleid=6&langid=1&d=1417480928&am p;td=ltr&sheet=additional.css


    The browser will not allow insecure items (ie: items loaded via HTTP) to be displayed when you are visiting the site through HTTPS (ie: https://huntingbc.ca)

    Rather than hard linking using http:// and FQDN, it should be linked like this:

    type="text/css" href="/forum/css.php?styleid=6&langid=1&d=1417480928&am p;td=ltr&sheet=additional.css

    (If the application automatically adds the http://www.huntingbc.ca because it grabs it from a database or some other setting, that setting will need to be changed to https://www.huntingbc.ca)

    The browser will then automatically assume the https://huntingbc.ca OR http://huntingbc.ca based on whichever was used when the visitor originally landed on the page.


    A work-around for those affected is to type in "http://huntingbc.ca" into their browser. If you just type in "huntingbc.ca" most modern web browsers (newer versions of Chrome) will automatically try https:// first, so the site will load with the broken CSS / theme / image links due to the issue I described.

    Note that you will even see this in Firefox IF you add the https prefix, ie: https://huntingbc.ca ... Also, the broken HTTPS instance of the website will end up getting indexed and preferred by search engines, so soon all traffic from search engines will hit the broken page.

    This is definitely a site issue and is a result of that SSL certificate being installed on October 11th.

    Marc will need to reach out to his webmaster to either revert that change that was made October 11 or fix all of the insecure links that are hard coded within the site.

    I am happy to assist the webmaster in any way. Don't hesitate to reach out via PM.




    Last edited by caddisguy; 10-19-2023 at 02:26 PM.

  2. Site Sponsor

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •