SSL checkout page - identity not verified warning firefox

Hi all,

Got a curly one here. Had this OC site running for a couple of years and finally got around to implementing SSL (Rapid SSL)

The Problem:

a)in firefox (chrome is working fine) on the checkout page the SSL lock is replaced with a warning symbol, when clicked states " this website does not supply identity information"

heres the checkout URL : https://www.thaimarket.com.au/index.php ... t/checkout

b) just to make it weirder -> if I copy and paster the checkout page into a new firefox window the SSL lock appears with no warning....weird


Information:

Every thing appears to have installed ok & the SSLshopper site is showing the SSL is ok - > https://www.sslshopper.com/ssl-checker. ... ket.com.au

domain: http://www.thaimarket.com.au
OC 1.5.6
cert = RapidSSL

Any help would be greatly appreciated. Im sure this is scaring off some customers. It would prob scare me off.

Cheers
Daz

Seems to be some issue with mixed content on the

- contact page, checkout page & account pages

this is happening even on the default theme.

'm hoping some fine person might be able to point me in the right direction with this.

SOLUTION : Again thx to fidoXit.

This solution for the contact page SSL problem also fixes the checkout page problem.

Apply the same code change to cart.php as prescribed for contact.php
http://forum.opencart.com/viewtopic.php ... SL#p547598

BUMMER : The SSL lock problem (for firefox only) is intermittently coming and going. this looks like its going to be hard to pin down.

Love some help on this one

slewmania wrote:BUMMER : The SSL lock problem (for firefox only) is intermittently coming and going. this looks like its going to be hard to pin down.

Love some help on this one

Can't help, except to say that I've noticed this on the google home page, so perhaps it's not an opencart/your store issue but more of a firefox issue. Sometimes a lock, sometimes an exclamation - refreshing the page normally results in the lock showing.

It could be an extension kicking it off. I'd keep the dev tools open (F12) and when it does it look at the network log to see what's being served with plain HTTP

@grgr

Thanks for your comments. That is interesting for sure.

I think to fact the lock always goes back to secure after hitting refresh means there's something on the page it doesnt like.

But, I could be completely wrong of course

@PeteA - I was thinking extension to mate. I'll give your suggestion a shot and see what comes of it.

It's a bit above my level of understanding, but I should be able to hit F12 and observe if there's some http action there somewhere.