My website is a WordPress based website located here: https://www.saintjohnscamp.org/. I cannot figure out how to fix the https "not secure" message that comes up when you view the site in Google Chrome, which reads: "Your connection to www.saintjohnscamp.org is encrypted using 256-bit encryption. However, this page includes other resources which are not secure..." I have tried disabling all plugins in WordPress and looked at the source code of the page and cannot find any images, iframes, objects, etc. that are pulling from http:// instead of https://. The only instances of http:// in the source code are external links, which don't affect the not secure message (to the best of my knowledge). Can anyone point me in the right direction here? Is there a utility or service out there I can use to troubleshoot this message and fixing my page to be fully https compliant?
2 Answers
I think your problem is that URL:
Piclens only offers this two versions:
- http://lite.piclens.com/current/piclens.js full commented file (~39KB)
- http://lite.piclens.com/current/piclens_optimized.js lighter deployment file (~21KB)
Piclens current SSL certificate has expired.
-
1Why do you think this is his problem, this is a secured call. Aug 8, 2011 at 20:29
-
2@Peter This certificate has expired or is not yet valid. Piclens only offers HTTP links.– SkomskiAug 8, 2011 at 20:30
-
I have removed the link to Piclens and I'm still receiving the non secure message. Thanks for this tip though, that is very good to know. Aug 9, 2011 at 17:32
-
1This solved my problem: stackoverflow.com/questions/1087591/… Aug 9, 2011 at 18:00
To view the request with Wireshark:
Close other browsers, open Wireshark, select Capture - Interfaces, and select Start on the active internet device. Then enter "http" in the top filter box, it will show current http requests and responses. You could also filter by port 80 (http) or 443 (https).
Wireshark shows the site is requesting http, not https, for:
platform.twitter.com/widgets.js?ver=1.1
twitter.com/javascripts/blogger.js
api.flickr.com/services/feeds/photos_public.gne
and other twitter.com and flickr.com urls.
-
Thanks, I fixed the Twitter and Flickr calls, but I'm still receiving the error. I don't know how to use Wireshark or else I would test myself. Are there any other http calls I'm missing? Aug 9, 2011 at 17:49
-
-
1To use Wireshark, just close other browsers, open Wireshark, select Capture - Interfaces, and select Start on the active internet device. Then enter "http" in the top filter box, it will show current http requests and responses.– NoBugsAug 9, 2011 at 18:24
http
calls to flicker withhttps
.