SSL firefox 3

Posts: 34
Joined: 08/19/2008

I might get broke'ed but I have a feeling there's a bug with SSL/firefox 3/secure pages/ubercart

In Firefox 3:
When I have secure pages turned on every page but the checkout pages are SSL secured. Although, when I go to the checkout page the address bar icon background will turn blue (signaling it's SSL secure) but then turn back to gray -- which is not normal.

When secure pages is off, and I'm still under https, it will recognize the SSL on the checkout page.

I don't believe it's an issue with the paths I listed in secure pages settings because it all works perfect in Safari. So, I figured if something works in one environment and not the other, and it should, then there's an issue with the environment -- being Ubercart/Secure Pages/Firefox 3.

I originally posted in the support area but I have a hunch this could be a potential bug so I just wanted to throw it out there.

Thanks

Posts: 34
Joined: 08/19/2008

Also, I just found out if I change make sure to secure the listed pages to:

*

(so that every page is secure)

it will work, which I am using as a solution right now. And here's what I have in the list:

user
user/*
user/*/edit
admin
admin/*
cart/*
cart/checkout
cart/checkout/review
cart/checkout/payment_details/*
cart/checkout/complete
uc_paypal/ipn/*
uc_paypal/wps/*
uc_paypal/wps/complete/*
cgi-bin/webscr

Posts: 1300
Joined: 08/14/2007
Bug FinderEarly adopter... addicted to alphas.Getting busy with the Ubercode.

This sounds like an issue with Secure Pages.

Also I have seen SSL issues with Firefox3, depending on the site you are visiting. It isn't just Drupal sites - other sites whose SSL settings on the server might be wrong or incorrectly configured will have an "SSL Certificate Revoked" or other similar message.

I also think it might be tied into the Firebug extension - are you using that? I have found that turning it off for the site I'm visiting, and then restarting Firefox, often solves the issue.

--

"Pain don't hurt." - Dalton

Mike Nelson's RiffTrax! www.rifftrax.com

Posts: 34
Joined: 08/19/2008

I tried disabling Firebug and restarting and unfortunately it did not fix the problem. The SSL certificate is set to simply protect the entire site "/" in the hosting settings (1 & 1). I don't see why it would be revoked just on the checkout pages. There must be some code built in to Ubercart or a module I'm using that's causing it.

ATM, I'm just using "*" to protect everything. Then, I'm setting pages separately like catalog/* to not be secure. Now, when I set it to not secure the main pages like home, about and services it won't work.

..this is super frustrating.

Posts: 1300
Joined: 08/14/2007
Bug FinderEarly adopter... addicted to alphas.Getting busy with the Ubercode.

Yeah, it is - that's why I kept Firefox 2 on my home computer, and installed Firefox 3 in a separate install location at my work computer. I'd gotten the release candidate before that and it had the issues then too. I have posted to Bugzilla about it but I haven't gotten any response.

It seems the only "real" solution is to use Firefox2 for any sites that give you the SSL error. What's weird is that you can get the error even on a site you've been browsing all day - the error will crop up all of a sudden. This has been my experience, anyway.

--

"Pain don't hurt." - Dalton

Mike Nelson's RiffTrax! www.rifftrax.com