Mixed content errors when attempting to load management page

Getting Mixed Content: The page at management.php' was loaded over HTTPS, but requested an insecure script /languages/en-GB/website_code/scripts/file_system.js?version=3.14_(git_v3.14.0-1-gf76e877e2)'. This request has been blocked; the content must be served over HTTPS.

Trimmed to allow it post

Any idea how to resolve?

Tnansk

There are two ways I've seen this happening before:

1. when HTTPS was enabled after installing Xerte. Then you need to verify that the site_url in the sitedetails table contains the https://
2. When you have installed Xerte on a http server and the HTTPS is handled by a reverse proxy server (also check the same field).

I've added $xerte_toolkits_site->site_url ="https;//....." to the bottom of config.php which at least lets the page load. The stuff around line 209 in config.php -
// Try to get site_url in the same way ....
Seems to set it to http regardless of the setting in the database

Ok, then I assume you are using a proxy or load balancer befor the actual install that handles https. Is that correct?

If so, you should change the configuration of the proxy server of the loadbalancer to make sure the follwing header is set to https:

HTTP_X_FORWARDED_PROTO

I use an apache reverse proxy and in my virtual host file I have:

ProxyRequests Off
ProxyPreserveHost On
ProxyPass "/" " xerte-template.xxxxx/ " disablereuse=On
ProxyPassReverse "/" " xerte-template.xxxxx/ "
RequestHeader set X-Forwarded-Proto "https"

If that is not pssoible or inconvenient, copy the file reverse_proxy_conf.php.dist to reverse_proxy_conf.php and make sure that the column site_url in the sitedetails table has the correct value. I would not edit config.php and add th eparameter there, because that file might be overwritten in a future update of the installation.

Tom