10

My website is a WordPress based website located here: https://www.saintjohnscamp.org/. I cannot figure out how to fix the https "not secure" message that comes up when you view the site in Google Chrome, which reads: "Your connection to www.saintjohnscamp.org is encrypted using 256-bit encryption. However, this page includes other resources which are not secure..." I have tried disabling all plugins in WordPress and looked at the source code of the page and cannot find any images, iframes, objects, etc. that are pulling from http:// instead of https://. The only instances of http:// in the source code are external links, which don't affect the not secure message (to the best of my knowledge). Can anyone point me in the right direction here? Is there a utility or service out there I can use to troubleshoot this message and fixing my page to be fully https compliant?

7
  • 1
    Open up the resource inspector, which will show exactly what is loaded from where.
    – Yann Ramin
    Aug 8, 2011 at 20:23
  • Did you try removing all external http just to see what happens? Since you're using Chrome, perhaps set all insecure content to be blocked and see what breaks? I do see insecure content warnings from your flickr images.
    – Bart
    Aug 8, 2011 at 20:25
  • It's all of your unsecured calls to flicker that's causing the issue. Everything else is using ssl. Apparently, and just tested, you can replace all of your http calls to flicker with https. Aug 8, 2011 at 20:27
  • Thanks, I used the resource inspector to remove not only non secure calls to Flickr, but non secure calls to some Twitter scripts too. Now the inspector is not giving me any more non secure errors, but Chrome is still presenting the same non secure message. Arg, what could it be!? Aug 9, 2011 at 17:42
  • Nevermind: stackoverflow.com/questions/1087591/… Aug 9, 2011 at 18:02

2 Answers 2

5

I think your problem is that URL:

https://lite.piclens.com/current/piclens_optimized.js

Piclens only offers this two versions:

Piclens current SSL certificate has expired.

4
  • 1
    Why do you think this is his problem, this is a secured call. Aug 8, 2011 at 20:29
  • 2
    @Peter This certificate has expired or is not yet valid. Piclens only offers HTTP links.
    – Skomski
    Aug 8, 2011 at 20:30
  • I have removed the link to Piclens and I'm still receiving the non secure message. Thanks for this tip though, that is very good to know. Aug 9, 2011 at 17:32
  • 1
    This solved my problem: stackoverflow.com/questions/1087591/… Aug 9, 2011 at 18:00
1

To view the request with Wireshark:

Close other browsers, open Wireshark, select Capture - Interfaces, and select Start on the active internet device. Then enter "http" in the top filter box, it will show current http requests and responses. You could also filter by port 80 (http) or 443 (https).

Wireshark shows the site is requesting http, not https, for:

platform.twitter.com/widgets.js?ver=1.1

twitter.com/javascripts/blogger.js

api.flickr.com/services/feeds/photos_public.gne

and other twitter.com and flickr.com urls.

3
  • Thanks, I fixed the Twitter and Flickr calls, but I'm still receiving the error. I don't know how to use Wireshark or else I would test myself. Are there any other http calls I'm missing? Aug 9, 2011 at 17:49
  • Solution: stackoverflow.com/questions/1087591/… Aug 9, 2011 at 18:00
  • 1
    To use Wireshark, just close other browsers, open Wireshark, select Capture - Interfaces, and select Start on the active internet device. Then enter "http" in the top filter box, it will show current http requests and responses.
    – NoBugs
    Aug 9, 2011 at 18:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.