3.7 https mixed content protection

3.7 https mixed content protection

by Aaron Zuercher -
Number of replies: 4

I installed a fresh 3.7 server on Centos/Apache.   everything was working fine on http and I imported my courses OK.  Next I turned on https and setup a certificate using LetsEncrypt and now when I goto https site the page looks like basic HTML.  After much testing and trial/error I discovered taht the browers (Both Firefox and Chrome) and blocking most CSS/js/etc but if I click on the URL bar and disbable Mixed Content protection the https page looks normal.   Any idea why this is doing it and how to fix?

I found a https conversion tool in the admin menu but when I run it it doesn't seem to make a difference?  At thils point i'm unsure if this is apache seeting or a moodle setting that needs fixed?

I ran a SSL report on ssllabs.com and it said my site/certificate was grade A.

Thanks,

Aaron

Average of ratings: -
In reply to Aaron Zuercher

Re: 3.7 https mixed content protection

by Jon Bolton -
Picture of Particularly helpful Moodlers Picture of Testers

What's $CFG->wwwroot set to in your config.php file?

Average of ratings: Useful (1)
In reply to Jon Bolton

Re: Re: 3.7 https mixed content protection

by Aaron Zuercher -
Jon,
This seems to have fixed it! the config.php had http:// in it so I changed to https:// and restarted apache and site is loading normally.

Thanks!
In reply to Aaron Zuercher

Re: 3.7 https mixed content protection

by Luis de Vasconcelos -
Did you run the Search_and_replace_tool to convert HTTP links in your Moodle dataabaase to HTTPS?
In reply to Luis de Vasconcelos

Re: Re: 3.7 https mixed content protection

by Aaron Zuercher -
Luis,
I tried the search/replace and it did not fix anything.

Aaron