Mixed mode HTTPS warning for some users

[rob_sked]

Hi,

We've installed JIRA 4.4 and are using it over HTTPS, but are seeign odd behavour with certain non admin users. Certain users are being presented with:

This webpage contains content that will not be delivered using a secure HTTPS connection, which could compromise the securiyt of the entire webpage

The following always re-crates the error:

1. Browse to the dashboard window. If you are at the dashboard window browse away from it and come back.
2. Left click on either the Project or Issues header to bring up the drop down list.
3. Highlight an entry on the drop down list but do not select anything
4. Click anywhere in on the page below the headers

I have checked the web.xml settings, and we have the correct config applied.

I notice that this issue only occurs within IE 6, 7 & 8 (We've not tried 9)

Does anyone have any ideas? It seems to me that it could be some images that are not being served by HTTPS?

Thanks!

Rob

[Jeremy Largman · Accepted solution]

Hi Rob,

It seems to me that it could be some images that are not being served by HTTPS?

Yes, that's likely it, or something similar. JIRA out of the box doesn't have this problem (it loads all its images and other resources from a context path, so whatever URL you specify should work ok), so it must be something in the dashboard. Fortunately, these errors are fairly easy to track down. IE, like most browsers, has a view source option (see Microsoft's article). Check out the source, then search the page for https.

Once you have that, it might jump out at you what the solution is. If not, post the code fragment a few lines above and below the https, and I'll try to see if we can figure out where it's coming from.

One last tip/guess: if your server base URL is http, you might want to change it to https.