Thumbs require SSL connection

[PepijnVissers]

First, thumbs up, great weblog software.

I run serendipity over HTTP. After enabling HTTPS for administration, the frontpage is loaded over HTTP, except the thumbnails. They are loaded over HTTPS for some reason, which leads to ugly SSL warnings due to self-signed certificates.

GET requests for the thumbs show up in both apache and apache-ssl access logs. I don't think it's apache. Disabling SSL in admin does not solve the problem.

You can see for yourself @ http://www.zoefdehaas.nl

Any ideas appreciated!

TIA,
Pepijn

[garvinhicking]

Hi!

That might happen because if you insert links over a HTTPS backend, in your entries it will references those links to https instead of http. You'll need to fix those link URLs manually frmo https:// to http:// in your entries.

HTH,
Garvin

[PepijnVissers]

Garvin, thanks for your reply. The links inserted (and causing the trouble) reference to an uploaded thumbnail, so I only have relative paths there.

[garvinhicking]

Hi!

Hm, on your URL i don't see any thumbnails loaded over https?

Regards,
Garvin

[PepijnVissers]

So the page just loads completely over http? No SSL whatsoever?

[garvinhicking]

Hi!

Ah. I just looked at the source.

But if I view your HTTP-Headers, then if I request:

http://www.zoefdehaas.nl/uploads/second ... yThumb.png

your server forwards this request using a "Location" HTTP header to:

https://www.zoefdehaas.nl/uploads/secon ... yThumb.png

This shouldn't be caused by Serendipity, so do you know what's causing this? Maybe some custom .htaccess rules or some global server configuration?

Regards,
Garvin

[PepijnVissers]

Found it: you were right. I had a long forgotten mod_rewrite in httpd.conf for LocationMatch "*upload*" -> https. My bad .

Thanks for your help, much appreciated!