SSL Symbol not clearing in Firefox

3/05/2015 9:31 am | #1 johna1964

Hi! I noticed this issue about a week or so ago and contacting the hosting provider. They could not reproduce this issue; however, it is an ongoing issue in more than one location from my end. It is not an image issue. The only thing I could think of is perhaps the htaccess file. Webassist helped with editing this file and it worked as it should up to this point. I am uploading both htaccess files; one for before WA assistance and the one WA edited. I would like to know if you see anything that could be the cause for this.
You can go to the log in page to see if you have the same Firefox warning symbol: https://www.ecigaretteimpressions.com/accountaccess/login.php
I have uploaded both htaccess files although they aren't neat and tidy as on the server.
Thank you so much for your help!

3/05/2015 9:58 am | #2 Jason ByrnesWebAssist

looking at the source of your p[age, i can see a number of links that use HTTP addresses:

<div><a href="http://www.casaa.org/Electronic_Cigarettes.html" target="_blank" style="color:#FFF"><img src="../images/template_images/casaa-graphic.gif" border="0" width="66" height="65" alt="Link to Cassa" longdesc="../images/template_images/casaa-graphic.gif" /></a> 
Support CASAA</div>
Additional Resources: 
<a href="http://www.e-smokers-forum.com/" title="Link to E-Smokers-Forum" target="_blank" style="color:#FFF">ESF</a> 
<a href="../why_do_people_smoke.php" title="Link to Article" style="color:#FFF">Healing Lungs</a> 
<a href="http://en.wikipedia.org/wiki/Vegetable_Glycerine" title="Link to Wikipedia VG Info" target="_blank" style="color:#FFF">VG</a> 
<a href="http://en.wikipedia.org/wiki/Propolene_glycol" title="Link to Wikipedia PG Info" target="_blank" style="color:#FFF">PG</a> 


these can cause the type of issue you report.

3/05/2015 10:33 am | #3 johna1964

Thank you for the quick response :-)
I took the code out. I actually did that yesterday too. I just did it again, then uploaded only the login page. No change. It is continuing to show the firefox caution symbol. Any other ideas?
Thank you again!

3/05/2015 11:03 am | #5 johna1964

I can see that.
What about these then:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
Ok, I have tested on phone; Laptop; Desktop... so far the issue is found only using a desktop. I asked my brother to test from his desktop in firefox. He is unable to open in Firefox... so I'm thinking this may be a hosting provider issue.
I'll update when I figure it out.
Thank you again, Jason!

3/05/2015 12:58 pm | #6 johna1964

Hi again!
Okay, the only solution is to force ssl for the entire site. This may work; however, the hosts code is the following:RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://example.com/$1 [R=301,L]
This is the code that was on the original htaccess file before WA assistance.
How would I make this happen without disturbing the WA code?
Thank you again!!

3/05/2015 1:07 pm | #7 Jason ByrnesWebAssist

change:
# Redirect non-www urls to www
RewriteEngine on
RewriteCond %{HTTP_HOST} !^www\.ecigaretteimpressions\.com
RewriteRule (.*) http://www.ecigaretteimpressions.com/$1 [R=301,L]

to:
# Redirect non-www urls to www
RewriteEngine on
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://example.com/$1 [R=301,L]

RewriteCond %{HTTP_HOST} !^www\.ecigaretteimpressions\.com
RewriteRule (.*) http://www.ecigaretteimpressions.com/$1 [R=301,L]

but I don't think thats the problem.

I think it is a problem with the some of the script files calling outside resources using http

for example:
options.enableSearchboxOnly("http://www.ecigaretteimpressions.com/search_and_results_new.php");

or:
onclick="window.open('http://reddit.com/submit?url=https%3A%2F%2Fecigaretteimpressions.com%2Findex.php')">

and there are others.

3/05/2015 1:12 pm | #8 Jason ByrnesWebAssist

in your source, there is also this link:
<link rel="stylesheet" type="text/css" href="webassist/social/wasocial.css"/>

which goes to a 404 error page, the 404 error page uses standard http resources also, that could be causing the issue.

3/05/2015 1:24 pm | #9 Jason ByrnesWebAssist

it's also possible that your SSL Certificate does not set the ownership information

http://www.cknow.com/cms/articles/why-do-i-see-this-web-site-does-not-supply-ownership-information-in-my-browser.html

not all SSL Certificates supply that information.

Technical Support Forums

Free, outstanding support from WebAssist and your colleagues

SSL Symbol not clearing in Firefox

3/05/2015 9:31 am | #1 johna1964