[Plugin: WP Super Cache] Insecure warning on https sites with configured CDN

  • Adam

    (@blueajcooper)


    13 years, 4 months ago

    Despite having the tickbox ‘Skip https URLs to avoid “mixed content” errors’ ticked my site is still loading images and others assets from the specified CDNs. Since the CDN’s are specified with a non https url it all falls down.

    I’ve setup multiple CNAMES onto my site to take advantage of HTTP pipelining and would also like to support https but the above issue is causing a problem. My cdn’s are setup like this

    Offsite URL: https://cdn1.example.com
    Additional CNAMES: https://cdn2.example.com

    I have looked through the code in ossdl-cdn.php and it appears that it should be working, yet it is not. For some reason the line 

    if ( $ossdl_https && substr( $match[0], 0, 5 ) == 'https' )
		return $match[0];

    is not evaluating correctly.

    I am using the development version downloaded today at about 16:00.

    Many thanks
    Adam

    https://www.ads-software.com/extend/plugins/wp-super-cache/

Viewing 5 replies - 1 through 5 (of 5 total)

  • I don’t have https enabled on any of my sites. Can you debug this? Use something like this to log what goes through there:

    error_log( $_SERVER[ 'REQUEST_URI' ] . " " . substr( $match[0], 0, 5 ) );

    And check your PHP error log.

    After trying that myself, I spotted an error. Change 5 in the substr() command to 4. Does that help?

    Edit: Never mind. I was seeing something odd when I debugged it but 5 has to be right.

    Thread Starter Adam

    (@blueajcooper)

    Putting in this:

    error_log( “uri: ” . $_SERVER[ ‘REQUEST_URI’ ] . ” ” . $match[0] );

    Gives me:

    [Wed Oct 12 18:47:46 2011] [error] [client 0.0.0.0] FastCGI: server "/usr/local/bin/php5-fpm" stderr: uri: / https://my.host/wp-content/uploads/2010/06/ScreenShot_062610_020430-e1277540711226-480x255.jpg, referer: https://my.host/

    As you can see Request URI is coming back as ‘/’.

    I have however discovered what I believe the issue is. When adding images using the WordPress editor they are embedded with a full URI. Including the ‘https://’ bit. I’m not sure the plugin is at fault here but it’s still an issue. The content should have root relative links surely?

    Yeah, that looks like it. The images have http rather than https urls. Do you use the backend using SSL or not?

    Thread Starter Adam

    (@blueajcooper)

    I setup SSL using define('FORCE_SSL_ADMIN', true); in my config file. I figured that since it was all setup anyway I should probably test accessing the site itself with SSL just incase someone preferred to. I hadn’t realised that the image URLs were hard coded like this and that they would cause an issue.

    I could go through and begin making all the images relative addressed but then the CDN functionality wouldn’t work at all since it checks for the site_url before processing.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘[Plugin: WP Super Cache] Insecure warning on https sites with configured CDN’ is closed to new replies.