Secure Website help - SSL and IE8 insecure data???

Community Forums/General Help/Secure Website help - SSL and IE8 insecure data???

Amon(Posted 2011) [#1]
Everything seems to have been installed properly i.e. I have installed my GEOTRUST SSL Cert both via the plesk panel and within IIS7.5.

I have made sure to modify the site bindings so the site is viewable via HTTPS and I have also used the MS URL Rewrite 2 module to create a redirect from HTTP to HTTPS.

My SSL Cert is both registered to www.amon.co and amon.co.

Here is my main problem:

When accesing my site via HTTPS with Firefox the security Seal is displayed and I can verify the SSL Certificate and security information. Basically Firefox shows my site as safe and all data as encrypted. IE8 on the other hand complains of data being loaded from non secure locations. The damn popup will not go no matter what I've tried. I know how to disable it within IE Settings but I would rather track down where on my webserver's earth my site is pulling insecure data from.

I have done research in to this and have found that CSS, js, or any webscript file that conatins any reference to HTTP or non relative URL's is the culprit.

How do I go about tracking down what data my site is loading when a page is accessed via the browser?

Something is sneaking past me, hidden deep within my CMS Source that is referencing an insecure url, image or somesuch other.

Any help would be appreciated.

P.S IE8 would be the odd one out wouldn't it. I bet it's a bug. >:)

Ta!


xlsior(Posted 2011) [#2]
. IE8 on the other hand complains of data being loaded from non secure locations. The damn popup will not go no matter what I've tried. I know how to disable it within IE Settings but I would rather track down where on my webserver's earth my site is pulling insecure data from.


I'd start with a search across your website files for any references to:


src="http://



and go from there...

This tool may come in handy:
http://www.inforapid.de/html/searchreplace.htm

Allows you to search across entire subdirectories, and also do search&replace of the found matches.


Amon(Posted 2011) [#3]
Hi thanks for the suggestion, xlsior. I managed to track down with the help of what you linked to several files with HTTP urls. All changed now. Also I found out that when I installed DivX Player and the Encoder it installed some IE8 browser addons that were also causing this popup to show. I've disabled the addons, made sure no more references to external http urls and the site, at least from my browser, is working fine now.

Cheers for your help.