Installed SSL certificate. Not working correctly.

[XYZ500]

My site was accessible as "domain.com".

My host installed the SSL certificate.

I changed the website URL in admin settings from "domain.com" to "https://domain.com".

The site is being accessed as "https://domain.com" but it's not showing that green lock and green 'https' as it should now.

My host says "The SSL is installed and is working without issue however the site pulling over SSL has issues due to non https reference in your site code. This is something you need to consult your developer in regards to."

What do I do to make this work?

[CAG CheechDogg]

You need to check your site for anything that has "http" links in it like images, links, javascripts and external stylesheets ...

In may take some time ...

[kh99]

I haven't done it myself (set up a forum to use https, that is), but I think what they're saying is that your page loads one or more external things via http. So you might have javascript or images that aren't accessed via an https url. I think you should be able to figure that out by viewing the page source of a page and searching for http:, or maybe use the developer tools network tab to see what's being loaded.

It's also a problem if you let people post images. I've seen people handle that by using a proxy for the images, or by copying them to your server. I know there's at least one mod for doing that.

Edit: Like this one: https://vborg.vbsupport.ru/showthread.php?t=253309 . I think there was another one but I can't find it right now.

I was writing while CAG CheechDogg posted, but yeah, that's what I mean.

[CAG CheechDogg]

Originally Posted by kh99

I was writing while CAG CheechDogg posted, but yeah, that's what I mean.

Thank you kh99 for the extra info ... I forgot to mention that this happens when you let people add images in posts or when you allow people to add signatures and home page links in their profiles.

But yes, one easy way is to right click on the home page and then view "source code" that will give you "some" of the http served images and content to change ...

[XYZ500]

Is the solution to this the same as you two have proposed?

[kh99]

Yes, they're saying the same thing.

[Fields]

I used the following site after I installed a certificate:

https://www.whynopadlock.com/

It tells you which elements aren't called securely.

[XYZ500]

Originally Posted by Fields

I used the following site after I installed a certificate:

https://www.whynopadlock.com/

It tells you which elements aren't called securely.

@Others

Is the green padlock for every page or the entire site? Meaning, in order to display it green, do I need to correct the URLs on the entire forum or just the particular pages where I want it displayed? I'm asking this so I can do a test. Make sure that all URLs are https on a particular page and see if it shows green then.

But how do I make all external URLs https? For example, on my homepage, in the footer, there is this "User Alert System provided by Advanced User Tagging v3.2.0 (Lite) - vBulletin Mods & Addons" This is a link. The Advanced User Tagging website is not https. So what do I do?

[kh99]

Originally Posted by ECZ

I'm seeing these test results. What does it mean?

I don't know what those results mean. It sounds like it couldn't find any script or image tags on the page. It says it could be that you didn't submit a valid secure link, but it did find your certificate info. I don't know.

Is the green padlock for every page or the entire site? Meaning, in order to display it green, do I need to correct the URLs on the entire forum or just the particular pages where I want it displayed? I'm asking this so I can do a test. Make sure that all URLs are https on a particular page and see if it shows green then.

I'm sure it's per page.

But how do I make all external URLs https? For example, on my homepage, in the footer, there is this "User Alert System provided by Advanced User Tagging v3.2.0 (Lite) - vBulletin Mods & Addons" This is a link. The Advanced User Tagging website is not https. So what do I do?

You don't have to worry about links to other pages, only if it's something that gets loaded on that page, like an image, javascript, or a style sheet.

[XYZ500]

@kh99

After trying to find everything and correcting it, one of the things that I am unable to fix are the last post icons.

These image icons are being loaded with http. Where is the file located that has the links to these icons so I can change them to https?