Mixed content blocked

[Tuomo Saari]

Hi,

I am installing a new instance of ERDDAP on my test server (v 2.28.1). For some reason, there is "mixed active content" (http and https), and the http content is blocked. For example, the style sheet (erddap2.css) gets blocked so the page doesn't look very good. See the image below. 

Which configurations make the links in the index.html start with "http" and not "https"? 

In my setup.xml, baseUrl starts with "https://", what else is required?

I have not had this issue before.

Thank you!

Best Regards,

Tuomo Saari

[Christopher Olson]

Hi Tuomo,

Have you also included the parameter <baseHttpsUrl>https://...</baseHttpsUrl> in your setup.xml?

I had this same issue and in my case since I was using the docker deployment these two parameters were set as environment variables.  I'm not sure what your setup is but that's something to check as well.  Hope this helps.

Chris

--
You received this message because you are subscribed to the Google Groups "ERDDAP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to erddap+un...@googlegroups.com.
To view this discussion, visit https://groups.google.com/d/msgid/erddap/0d4e1812-2c76-420d-9b0d-36cebbc5293en%40googlegroups.com.

--

Chris Olson (he/him)

Data & Products Developer

Regional Ocean Data Sharing Initiative (RODSI)

Pacific Islands Ocean Observing System (PacIOOS)

mobile: (650) 516-5202

[Chris John - NOAA Affiliate]

It is also worth checking how you are proxying and what your connector ports 8080 and 8443 look like (tomcat/conf/server.xml). If you could send that as well.

Thanks,

Christopher John (he/him)

NOAA Appointed Technical Director of ERDDAP™

Computer and Information Systems Manager, TSPi

To view this discussion, visit https://groups.google.com/d/msgid/erddap/CAK0CCGEr38sUXJUoTD8hdvXSgMVq_sxTBN8hcKyqGPSmF54RpA%40mail.gmail.com.

[Tuomo Saari]

Chris, John: thank you for your responses! 

I have pretty much copied (and modified the server name) the settings from another, working ERDDAP installation. That's why I'm scratching my head a little. Could be a typo somewhere, or I'm just blind to something obvious...

In setup.xml I have:

<baseUrl>https://ocng-gcoos-tmp.artsci.tamu.edu</baseUrl>

<baseHttpsUrl>https://ocng-gcoos-tmp.artsci.tamu.edu</baseHttpsUrl>

In server.xml (using non-default port because there's another Tomcat for THREDDS... again, this same config works on another server)

<Connector port="6060" protocol="HTTP/1.1"

           connectionTimeout="300000"

           relaxedQueryChars="[]|"

           redirectPort="6443" />

Apache2 site proxy config:

   ProxyRequests Off

   ProxyPreserveHost On

   ProxyPass /erddap http://localhost:6060/erddap

   ProxyPassReverse /erddap http://localhost:6060/erddap

...and the http -> https rewrite rule

  RewriteEngine On

  RewriteCond %{SERVER_NAME} =ocng-gcoos-tmp.artsci.tamu.edu

  RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]

I also tried:

  RewriteCond %{HTTPS} !=on

  RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]

And I configure the SSL on apache2. 

... I will keep banging my head on the brickwall until I find something :) Appreciate any ideas if you still have some.

Thanks!

Tuomo Saari | Research Specialist II
Gulf of America Coastal Ocean Observing System (GCOOS)

Department of Oceanography | Texas A&M University
(979) 393-2480 | tuomo...@gcoos.org | tsa...@tamu.edu

On Thu, Oct 2, 2025 at 8:34 AM Chris John - NOAA Affiliate <chris...@noaa.gov> wrote:

It is also worth checking how you are proxying and what your connector ports 8080 and 8443 look like (tomcat/conf/server. xml). If you could send that as well. Thanks, Christopher John (he/him) NOAA Appointed Technical Director of ERDDAP™ Computer

ZjQcmQRYFpfptBannerStart

This Message Is From an External Sender

This message came from outside your organization.

 

ZjQcmQRYFpfptBannerEnd

[Chris John - NOAA Affiliate]

You could try setting <useHeadersForUrl> to false (or true, if it was already false- this is in setup.xml). This is a setting that can allow for certain complex setups to function, but it's possible we need to address something for this uncommon situation. If this does fix your problem, please let me know since we'll want to update the headers for url logic to address the issue.

I assume you've seen them, but you can check your configs against the relevant sections of documentation:

https://erddap.github.io/docs/server-admin/deploy-install?_highlight=8443#proxy

https://erddap.github.io/docs/server-admin/additional-information?_highlight=8443#security-authentication-and-authorization

It may be useful to send more (or all) of your server.xml. Some of the surrounding context would help me make sure I understand your configuration.

Christopher John (he/him)

NOAA Appointed Technical Director of ERDDAP™

Computer and Information Systems Manager, TSPi

[Tuomo Saari]

Hi Chris, 

Thank you very many! 

This worked: <useHeadersForUrl>false</useHeadersForUrl>.

Setup.xml did not originally have this line.

BR,

Tuomo

Tuomo Saari | Research Specialist II
Gulf of America Coastal Ocean Observing System (GCOOS)

Department of Oceanography | Texas A&M University
(979) 393-2480 | tuomo...@gcoos.org | tsa...@tamu.edu

On Thu, Oct 2, 2025 at 11:39 AM Chris John - NOAA Affiliate <chris...@noaa.gov> wrote:

You could try setting <useHeadersForUrl> to false (or true, if it was already false- this is in setup. xml). This is a setting that can allow for certain complex setups to function, but it's possible we need to address something for

[felimon....@gmail.com]

Thank you, folks, for helping Tuomo get this over the hump.

--
You received this message because you are subscribed to the Google Groups "ERDDAP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to erddap+un...@googlegroups.com.
To view this discussion, visit https://groups.google.com/d/msgid/erddap/0d4e1812-2c76-420d-9b0d-36cebbc5293en%40googlegroups.com.

 

--

Chris Olson (he/him)

Data & Products Developer

Regional Ocean Data Sharing Initiative (RODSI)

Pacific Islands Ocean Observing System (PacIOOS)

 

mobile: (650) 516-5202

 

--
You received this message because you are subscribed to the Google Groups "ERDDAP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to erddap+un...@googlegroups.com.
To view this discussion, visit https://groups.google.com/d/msgid/erddap/CAK0CCGEr38sUXJUoTD8hdvXSgMVq_sxTBN8hcKyqGPSmF54RpA%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "ERDDAP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to erddap+un...@googlegroups.com.

To view this discussion, visit https://groups.google.com/d/msgid/erddap/CAMx%3DUChsOV8RaBU54HQ5K7zZ_RaOGyBr3aKwb1a6T%3Dk%3DTYq4Ng%40mail.gmail.com.