
How can I detect mixed content on my site
Hello Firefox
Something is driving us mental :-( ... our drupal-website https://tweetakt.be keeps giving warnings as containing 'mixed content' on Firefox. We have screened it over and over. Is there any way to be able to detect where it goes wrong? We're getting desperate...
Thank you so much!
Tom
Chosen solution
I do not even get that far my Firefox 48 blocks the secure version of https://tweetakt.be/ Sorry I am not a web developer but untill or unless someone else comments maybe some of this will help Please see also
I need to set an a exception before I can even see your site. If you are not handling money and confidential information do you have a none secure version of the site by the way.
I get an error message under the advanced option saying
tweetakt.be uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER
And
CN = Intermediate Certificate DV SSL CA - G2 OU = Domain Validated SSL O = Intermediate Certificate C = NL
You may also be interested in this test report on your site and the documentation that ssllabs provides
- Chain issues Incomplete https://www.ssllabs.com/ssltest/analyze.html?d=tweetakt.be
This help article is aimed at the end user trying to view sites
- Secure Website Certificate_problematic-certificates
As for the lesser problem of mixed content please see
- Mixed content blocking in Firefox
- How to fix a website with blocked mixed content https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content/How_to_fix_website_with_mixed_content
All Replies (6)
Hi Tom,
Starting in Firefox 23, if a secure page includes certain types of insecure content, Firefox blocks the insecure content and a shield icon will appear in the address bar. See this article for more information about the new mixed content blocker: Mixed content blocking in Firefox
To temporarily allow the mixed content to be displayed:
- Click the shield icon
in the address bar and choose Disable Protection on This Page from the dropdown menu.
To allow insecure content to be displayed in all secure pages, enter about:config in the address bar and double-click on this preference, to toggle it from true to false:
security.mixed_content.block_active_content
You can also use this add-on instead, to toggle the preference:
- Toggle Mixed active content add-on
You may want to do this only for the current session, then reset the preference back to "true" and check back with the site to see whether it's been fixed, since this is a global setting that exposes you on all sites, not just the one you care about.
Let us know if this helps!
Chosen Solution
I do not even get that far my Firefox 48 blocks the secure version of https://tweetakt.be/ Sorry I am not a web developer but untill or unless someone else comments maybe some of this will help Please see also
I need to set an a exception before I can even see your site. If you are not handling money and confidential information do you have a none secure version of the site by the way.
I get an error message under the advanced option saying
tweetakt.be uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER
And
CN = Intermediate Certificate DV SSL CA - G2 OU = Domain Validated SSL O = Intermediate Certificate C = NL
You may also be interested in this test report on your site and the documentation that ssllabs provides
- Chain issues Incomplete https://www.ssllabs.com/ssltest/analyze.html?d=tweetakt.be
This help article is aimed at the end user trying to view sites
- Secure Website Certificate_problematic-certificates
As for the lesser problem of mixed content please see
- Mixed content blocking in Firefox
- How to fix a website with blocked mixed content https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content/How_to_fix_website_with_mixed_content
Modified
the more important thing to fix would be the missing intermediate certificate as john99 already described.
the mixed content on your site seems to be http://fonts.googleapis.com/css?family=Open+Sans:400,300,600,700 - you should change that address to load through https instead...
Hi Tom,
This screenshot may shine a light on it all (I'm assuming that you're Dutch, like me ?)
That help article is available in Dutch. You may even have seen it already in Dutch as a redirect from my link
Also I attach a screenshot of how I can not see your site, and how it appears with the web console showing the mixed content error. The thumbnail images expand if clicked. The other help article has Dutch text available, but again English (en-US) screenshots /nl/kb/certificaat-beveiligde-website#w_pro...
Thank you all for the advice - I understand what the problem is. Next step: fixing it :-)