HAProxy w/SSL termination mixed content issue.

Gordon Messmer gordon.messmer at gmail.com
Fri Feb 12 15:18:47 UTC 2016


On 02/12/2016 05:53 AM, Mark Haney wrote:
> When I pull it through the load balancer (HTTPS) it doesn't with an 
> error about mixed content.
...
> Or can someone begin to tell me where to start debugging.

View the source of the page in FF, and look for the string "http://"

Something in the site is generating absolute URLs; you want it to 
generate relative URLs.  Or, if that's not possible, you want it to 
generate absolute URLs with https://.

If your proxy doesn't have hardware SSL acceleration, you also might 
find that the system will scale better when passing SSL straight through 
to the web servers.  If you want to observe encrypted traffic for 
debugging, use ssldump.  Wireshark may also be able to analyze encrypted 
traffic, but I haven't used it before.

http://ssldump.sourceforge.net/
https://wiki.wireshark.org/SSL


More information about the users mailing list