Enable SSL on Reviewboard giving Mixed Content Errors

[Rashmi Sherawat]

Hi,

I am working on enabling SSL for reviewboard, and after doing all the configuration and enabling SSL certificate tags in apache-wsgi.conf, getting below error on my dashboard on user images. It seems like requesting 'http://' for the images. 

Do I need to update anything at my end or Is SSL enabling supported in RB?

Mixed Content: The page at 'https://reviewboard-test.yyy.com/reviews/dashboard/' was loaded over HTTPS, but requested an insecure image 'http://reviewboard/reviews/media/uploaded/avatars/a/ak/username__51f71d47-2dbd-4c79-9557-c840fac7b918.jpg'. This request has been blocked; the content must be served over HTTPS.

[David Trowbridge]

Hi,

You probably need to change the "Server" setting in /admin/settings/general/ to say https instead of http.

David

--

---
You received this message because you are subscribed to the Google Groups "Review Board Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to reviewboard-d...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/reviewboard-dev/ab711cfd-4a84-4a3d-8d93-913d4ae5483en%40googlegroups.com.

[Rashmi Sherawat]

Thanks David for your response.

I tried with suggested settings but image is still coming broken, now getting the below error: 

GET https://reviewboard-test.yyy.com/reviews/media/uploaded/avatars/a/ak/username__51f71d47-2dbd-4c79-9557-c840fac7b918.jpg 403 (Forbidden)

Status Code:

403 Forbidden

[Christian Hammond]

Hi Rashmi,

That looks like a filesystem permission error. If the web server can't access files in the directory configured for that path (either due to bad filesystem permissions or missing SELinux configuration), then you can get that.

If you do have SELinux enabled, see the Notes on https://www.reviewboard.org/docs/manual/4.0/admin/installation/creating-sites/#apache

Christian

To view this discussion on the web visit https://groups.google.com/d/msgid/reviewboard-dev/40af00af-cce6-4083-b519-f31dd34dffb4n%40googlegroups.com.

--

Christian Hammond

President/CEO of Beanbag

Makers of Review Board