SSL Reverse proxy showing partially secure

[Fosiul Alam]

Hi 

I just followed this link

https://seeq12.atlassian.net/wiki/spaces/KB/pages/116188360/Apache+Reverse+Proxy+for+HTTPS+on+Ubuntu

Configure exactly same as described, All looks good, but as soon as I am logging in to the bitbuket both Mozilla or chrome  shows its not fully secure

While checking the web console i see some of the request still http,  

not sure if this Apache reverse proxy or bit bucket ( i guess its apache reverse proxy)

I looked carefully every where but not understanding why is happening, Can you please help me with this 

From the Console

Blocked loading mixed active content "http://git.xxxxxxxxy.co.uk/s/1406913013/ca3ded2/1/7.6.3/_/download/resources/com.atlassian.auiplugin:internal-iconfont-v2/fonts/adgs-ico

 Mixed Content: The page at 'https://git.xxxx.co.uk/dashboard' was loaded over HTTPS, but requested an insecure image 'http://www.gravatar.com/avatar/92c77bf08cb788a4b29b588450f1f640.jpg?s=48&d=mm'. This content should also be served over HTTPS.

My configuation

<VirtualHost *:80>
ServerName git.xxxxx.co.uk

RewriteEngine On
RewriteRule ^/?(.*) https://%{SERVER_NAME}:443/$1 [R,L]
</VirtualHost>

<IfModule mod_ssl.c>
<VirtualHost *:443>

ServerName git.xxxxxx.co.uk

ProxyRequests Off
ProxyPreserveHost On

ProxyPass / http://127.0.0.1:7990/ retry=0
ProxyPassReverse / http://127.0.0.1:7990/
RequestHeader set X_FORWARDED_PROTO 'https'
SSLEngine On

SSLCertificateFile /home/_ssl_certificate.cer
SSLCertificateKeyFile /home/_private_key.key
SSLCACertificateFile /home/ssl_certificate_INTERMEDIATE.cer

</VirtualHost>

</IfModule>

 I Refer to this 

https://confluence.atlassian.com/jirakb/insecure-content-warning-in-browser-on-an-ssl-instance-298978425.html

cat /var/atlassian/application-data/bitbucket/shared/bitbucket.properties

<Connector port="7990" maxThreads="150" minSpareThreads="25" connectionTimeout="20000" enableLookups="false" maxHttpHeaderSize="8192" protocol="HTTP/1.1" useBodyEncodingForURI="true" acceptCount="100" disableUploadTimeout="true"
proxyName="git.xxxxco.uk" proxyPort="443" scheme="https" secure="true"/>

Still now luck 

[Anton Shaleev]

Hi Fosiul

As the issue related only to images loaded from gravatar I suppose it's not a problem in the proxy configuration.

Since Stash 2.4.0 it's possible to explicitly set the gravatar URL. So I would recommend you to set it in biutbucket.properties to HTTPS version.

Please check the KB Configure Gravatar URLs in Bitbucket Server for the detailed instructions. And of course, don't hesitate to ask if anything is not clear in the KB.

Best Regards

Anton