This question is answered.


Permlink Replies: 9 - Pages: 1 - Last Post: 20-Nov-2020 18:35 Last Post By: MarkusD Threads: [ Previous | Next ]
MarkusD

Posts: 529
Registered: 13-Apr-2006
http vs. https
Posted: 19-Nov-2020 19:29
 
  Click to reply to this thread Reply
Hello,

by chance I saw that in the generated HTML files http is written instead of https. Here an example:

<!doctype html>
<html lang="de" class="no-js" data-level="1">
	<!-- Generated by jAlbum: https://jalbum.net at 19.11.2020 19:04 (4532bb16c07780cf932fb48eae3bcfcc) -->
	<head>
		<meta charset="UTF-8">
		<meta http-equiv="x-ua-compatible" content="ie=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1.0">
		<title>2004/03 Helsinki</title>
		<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Oswald">
		<meta name="description" content="Description">	<!-- !!MD -->
		<meta name="generator" content="jAlbum 23 & Tiger 2.13.6 [Linen]">
		<meta name="keywords" content=" Norge, Sverige, Danmark, Suomi, Skandinavia, Norwegen, Schweden, Dänemark, Finland, Skandinavien, Norway, Sweden, Denmark, Finland, Scandinavia"> 
		<meta property="og:url" content="http://www.markus-drueck.de/norge/2004%2003%2015%20Helsinki/index_de.html">
		<meta property="og:image" content="http://www.markus-drueck.de/norge/2004%2003%2015%20Helsinki/folderthumb.jpg">
		<meta property="og:image:width" content="600">
		<meta property="og:image:height" content="420">
		<link rel="image_src" href="http://www.markus-drueck.de/norge/2004%2003%2015%20Helsinki/folderthumb.jpg">
		<meta name="twitter:image" content="http://www.markus-drueck.de/norge/2004%2003%2015%20Helsinki/folderthumb.jpg">


The thing is, it only occurs for some links, not for all. It has probably no negative effects, but it is probably not correct either.
JeffTucker

Posts: 6,962
Registered: 31-Jan-2006
Re: http vs. https
Posted: 19-Nov-2020 19:38   in response to: MarkusD in response to: MarkusD
 
  Click to reply to this thread Reply
Which skin? That's coming from the skin coding - the jAlbum core doesn't write any HTML or CSS on its own.
MarkusD

Posts: 529
Registered: 13-Apr-2006
Re: http vs. https
Posted: 19-Nov-2020 19:43   in response to: JeffTucker in response to: JeffTucker
 
  Click to reply to this thread Reply
JeffTucker wrote:
Which skin?
Tiger
JeffTucker

Posts: 6,962
Registered: 31-Jan-2006
Re: http vs. https
Posted: 19-Nov-2020 19:47   in response to: MarkusD in response to: MarkusD
 
  Click to reply to this thread Reply
And off to the Tiger forum it goes!

But I think this may be user error. Take a look at Tiger > Site > Site admin > Server related settings > Upload path. What have you entered there?
MarkusD

Posts: 529
Registered: 13-Apr-2006
Re: http vs. https
Posted: 19-Nov-2020 19:57   in response to: JeffTucker in response to: JeffTucker
 
  Click to reply to this thread Reply
JeffTucker wrote:
And off to the Tiger forum it goes!
Thanks.

But I think this may be user error. Take a look at Tiger > Site > Site admin > Server related settings > Upload path. What have you entered there?
Nothing, it's empty.

From my JAP file:
skin.uploadPath=
JeffTucker

Posts: 6,962
Registered: 31-Jan-2006
Re: http vs. https
Posted: 19-Nov-2020 20:01   in response to: MarkusD in response to: MarkusD
 
  Click to reply to this thread Reply
Enter the correct URL for your site in that field.

Not sure where the skin is picking it up, and I don't seem to be able to access your lifeboat file, so I can't investigate.

ETA: Just a guess, but it's probably pulling the address from the upload routine, and you probably marked the "web root" with http instead of https. From the upload manager, connect to your site with the proper SSL credentials, and mark the web root again. That will update it to https.

Edited by: JeffTucker on 19-Nov-2020 14:04
MarkusD

Posts: 529
Registered: 13-Apr-2006
Re: http vs. https
Posted: 19-Nov-2020 20:46   in response to: JeffTucker in response to: JeffTucker
 
  Click to reply to this thread Reply
JeffTucker wrote:
Enter the correct URL for your site in that field.

Not sure where the skin is picking it up, and I don't seem to be able to access your lifeboat file, so I can't investigate.

ETA: Just a guess, but it's probably pulling the address from the upload routine, and you probably marked the "web root" with http instead of https. From the upload manager, connect to your site with the proper SSL credentials, and mark the web root again. That will update it to https.

You are right, then value in "accounts.xml" was:
webRootURL="http://www.markus-drueck.de"

I changed it to:
webRootURL="https://www.markus-drueck.de"

compiled and uploaded again, but I still have the http values I reported before.

But never mind, I close this case. I just thought there is an easy answer to my question. And the fact that I don't encounter any real problems... Thanks for you assistance anyway.
JeffTucker

Posts: 6,962
Registered: 31-Jan-2006
Re: http vs. https
Posted: 19-Nov-2020 21:39   in response to: MarkusD in response to: MarkusD
 
  Click to reply to this thread Reply
The other place to look is Settings > General > Address.

It has to be picking up that bad protocol from somewhere - it's not hard-wired to produce http. And the problem it creates is that your page might not load in secure mode, because there is mixed content on the page.
Laza

Posts: 2,546
Registered: 6-Sep-2005
Re: http vs. https
Posted: 20-Nov-2020 11:31   in response to: MarkusD in response to: MarkusD
Correct
  Click to reply to this thread Reply
Check out the following:

Upload button -> (triangle) -> Web address: should be https://www.markus-drueck.de/norge/

Settings / Tiger / Site / Site admin / Upload path = https://www.markus-drueck.de/norge/

If the latter is empty the skin tries to figure out the final URL by looking into the "web address", but that can be http: instead of https:
This is why it's better to use the "Upload path" setting of Tiger to ensure it picks up the proper protocol.
MarkusD

Posts: 529
Registered: 13-Apr-2006
Re: http vs. https
Posted: 20-Nov-2020 18:35   in response to: Laza in response to: Laza
 
  Click to reply to this thread Reply
Laza wrote:
Check out the following: ...
Thanks, that did the trick. ;-)

Just as an info, I became aware of this phenomenon when I had my site examined with http://home.snafu.de/tilman/xenulink.html.
Legend
Forum admins
Helpful Answer
Correct Answer

Point your RSS reader here for a feed of the latest messages in all forums