The Foxy forums are on the move!

We're in the process of moving our forums over to a new system, and so these forums are now read-only.
If you have a question about your store in the meantime, please don't hesitate to reach out to us via email.

A Site without an SSL

jlivingstonjlivingston Member
in Help edited October 2012
Hi guys,

One of my clients has a site that has no SSL, i.e. not even a generic SSL. If you try to access the site using https, you get taken to a generic page from the hosting company, not their site. I contacted the hosting company about this, and they said that if we want secure connections to go to their website, they'll have to purchase a private cert.

The problem is that I'm getting security errors when i try to cache their template, i.e.:
A reference to a non secure css file was found:
http://site.com/wp-content/themes/sitetheme/css/somesheet.css

Please take a look at our automatic template caching documentation for more info.Your template has been saved, but your customers will see insecure content warnings. Please set the template url and cache your template which will rewrite all HTTP references to HTTPS.

I'm not sure why this is an error that I should be concerned about, since all of the styles and style images get cached to your secure servers, but I've been told by your team that it's a concern and visitors to the site may see security warnings. But obviously with this site, if I try to grab any stylesheets via a secure connections, the stylesheet isn't found.

Is there any way to resolve this sort of error without making my client buy a private certificate?

Best,

Joey
Comments
  • fc_adamfc_adam FoxyCart Team
    @jlivingston,

    Could you let us know which store this is for?

    So this is an issue you'll want to fix as if the caching system is telling you something isn't secured then customers will see a warning. That error doesn't mean you need to have SSL on the actual website though, just that you need to fix the template to ensure that file gets cached.

    Without seeing the template at hand it's hard to tell what the actual cause might be, but it could possibly be a small known issue relating to how the CSS style tag is setup. From http://wiki.foxycart.com/static/redirect/automagicache
    Linked Stylesheets if the rel attribute is after the href attribute. This one is weird, and shouldn't be a problem (the regex is perfect), but if you have <link> elements that aren't being cached, switch the order of the attributes and put the rel=“stylesheet” before the href attribute.
  • Hi Adam,

    I just whispered you the URL.

    Thanks.
  • fc_adamfc_adam FoxyCart Team
    @jlivingston,

    I just cached each of that stores templates (cart, checkout and receipt) and none of them triggered the error relating to an uncached stylesheet - could you confirm (via whisper if needed) which template and which stylesheet isn't caching?
  • Hi Adam,

    It happens on both the cart and checkout. The warning doesn't happen when you cache, it happens when you save the cached result.

    Best,

    Joey
  • lukeluke FoxyCart Team
    edited October 2012
    We're still looking into this, but my hunch is this comment is actually confusing the admin into thinking there's an insecure element there:
    /* @override http://********.com/wp-content/themes/Starkers/css/layout.css */
    

    That's in the layout.css file that gets imported. It looks like that warning is an error in our admin because when I view details of the cart page, everything is secure.
  • lukeluke FoxyCart Team
    Hey @jlivingston. Just wanted to let you know we rolled out a fix for the admin that should prevent that warning from showing up.
  • Thanks so much for your help, Adam and Luke.
Sign In or Register to comment.