HAProxy w/SSL termination mixed content issue.
Gordon Messmer
gordon.messmer at gmail.com
Fri Feb 12 15:18:47 UTC 2016
On 02/12/2016 05:53 AM, Mark Haney wrote:
> When I pull it through the load balancer (HTTPS) it doesn't with an
> error about mixed content.
...
> Or can someone begin to tell me where to start debugging.
View the source of the page in FF, and look for the string "http://"
Something in the site is generating absolute URLs; you want it to
generate relative URLs. Or, if that's not possible, you want it to
generate absolute URLs with https://.
If your proxy doesn't have hardware SSL acceleration, you also might
find that the system will scale better when passing SSL straight through
to the web servers. If you want to observe encrypted traffic for
debugging, use ssldump. Wireshark may also be able to analyze encrypted
traffic, but I haven't used it before.
http://ssldump.sourceforge.net/
https://wiki.wireshark.org/SSL
More information about the users
mailing list