Links thumbnails breaking SSL
By Jeff Kilbreath on Tuesday, 12 January 2016
Posted in Technical Issues
Replies 14
Likes 0
Views 816
Votes 0
Hi folks

If you've been following my saga for a while, you'll know, that due to the nature of my site, we serve everything through TLS/SSL. In fact if the secure connection is impaired (broken/mixed SSL) components of my site will not work - a major issue.

I tracked the problem down to the sharing of links on the activity stream. When I link a site and EXCLUDE the thumbnail, the secure session remains intact when easySocial reloads to show the new entry in the stream. However, when I share a link and include a thumbnail served from an HTTP site, my secure session is broken. Thumbnails served from a HTTPS site do not break my session security.

I followed some threads (most notably here) that indicated that thumbnail caching would be included in ES 1.3. In the Links Application configuration in the ES dashboard I have set

"Serve image urls via internal proxy" to "YES"

but the sessions continue to break upon sharing HTTP sourced thumbnails.

Any help would be appreciated!

Thanks

-Jeff
Hey Jeff,

It actually depends on where the image is stored. If EasySocial is unable to retrieve the image from the respective site, then the image has to be served from the source itself. Do you have the direct link to the page that has this issue?
Mark
·
Tuesday, 12 January 2016 12:28
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Mark - it's my main community page. I have yet to find a thumbnail that does not break SSL, however shared links without thumbnails do not break SSL. I would like to maintain the thumbnail feature as it adds a nice element to the Stream.

Any advice? Is it a permissions issue on my end on the directory where the thumbnails are stored? If possibly - is it worth a look?

Thanks

-Jeff.
Jeff Kilbreath
·
Wednesday, 13 January 2016 22:00
·
0 Likes
·
0 Votes
·
0 Comments
·
Can you please edit your first post above and include the ftp access as well?
Mark
·
Thursday, 14 January 2016 13:54
·
0 Likes
·
0 Votes
·
0 Comments
·
Please see my edited post. Thanks Mark!
Jeff Kilbreath
·
Tuesday, 19 January 2016 00:45
·
0 Likes
·
0 Votes
·
0 Comments
·
Hey Jeff,

I actually need the FTP access to troubleshoot this. Can you please help?
Mark
·
Wednesday, 20 January 2016 00:01
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Mark - I've updated the ticket with the information you need to proceed. Thanks
Jeff Kilbreath
·
Wednesday, 03 February 2016 23:24
·
0 Likes
·
0 Votes
·
0 Comments
·
Hey Jeff,

The FTP access is still not working
Mark
·
Wednesday, 03 February 2016 23:43
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Mark - please try again. I updated the password and tested it - it seems to be working.
Jeff Kilbreath
·
Thursday, 04 February 2016 00:39
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Mark - have you had a chance to check in to this? Any help is always appreciated. Thanks

-Jeff
Jeff Kilbreath
·
Monday, 08 February 2016 23:40
·
0 Likes
·
0 Votes
·
0 Comments
·
Hey Jeff,

I am really sorry for the delay of this reply, it's a public holiday for us here and I have been extremely occupied with EasyDiscuss 4.

I have been trying to make changes via the FTP but I am hitting these errors, http://screencast.com/t/Sw8qEyL0 . Can you please advise?
Mark
·
Monday, 08 February 2016 23:58
·
0 Likes
·
0 Votes
·
0 Comments
·
Fixed. Please try again.
Jeff Kilbreath
·
Tuesday, 09 February 2016 00:55
·
0 Likes
·
0 Votes
·
0 Comments
·
Looks like it is already working but for sites that are being served with "https", it is not able to fetch the remote links because of a bug in Yosemite (I believe you are using Mac OSX for the site?) Take a look at the most recent link which I shared from "stackideas.com", the logo is being served from your site now.

Curl is returning the following errors when crawling "https" contents,

SSL: CA certificate set, but certificate verification is disabled

Take a look at this, http://stackoverflow.com/questions/26710482/yosemite-ssl-ca-certificate-set-but-certificate-verification-is-disabled
Mark
·
Tuesday, 09 February 2016 14:28
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Mark

Thanks for the follow up. I never did get it to work - but the good news is, the issue is resolved with the release of Mac Server 5.14.

Thanks again.

-Jeff
Jeff Kilbreath
·
Wednesday, 13 April 2016 20:09
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi there,

You are most welcome. Glad to hear that your issue has been resolved now.

As a gentle reminder, kindly start a new thread if you have any other issue in the future so it will be easier for us to manage your inquiry. I will lock and mark this thread as resolved.
Arlex Wong
·
Thursday, 14 April 2016 11:54
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post