@admin @adesh

Hello Adesh.

I use an SSL certificate on my domain and together with Codoforum, I unfortunately get the message that the SSL together with CF only works limited - so there are probably files or scripts which are not offered or integrated via SSL or secure enough.

Can it be that the FreiChat server of you does not run on SSL?

If so, here is a tip:

There is a free really good SSL certificate that anyone who has SSH or shell access can easily activate and use for free. The provider is part of the Linux Open Source distribution and calls itself Let's Encrypt - maybe that would be something for you at Codologic?

Here is the link to Lets Encrypt Service:
https://letsencrypt.org

Kind regards, Andy

Hi,

It may be something else because freichat runs on https.

Try checking the network tab in chrome developer tools to see which request is using http

@admin thx for the tip to make use of the developer console, now I found the problem;

Mixed Content: The page at 'https://cute-but-evil.de/board/index.php?u=/user/profile' was loaded over HTTPS, but requested an insecure image ''. This content should also be served over HTTPS.

Mixed Content: The page at 'https://cute-but-evil.de/board/index.php?u=/user/profile' was loaded over HTTPS, but requested an insecure image ''. This content should also be served over HTTPS.

These images are from codo pm (freichat) friend list - only the avatar images of the codopm friend list are not SSL ready - what to do now?

Kind regards, Andy

Hi what kind of web-server do you use?
The right way is to configure the server to redirect all http to https.

@admin @adesh

my server configurations are (I have a shared hosting):

Apache Server with a 75 Gig SSD drive & 1024 Mb Ram
PHP-Version: 5.6, to 7.3
Perl-Version: 5.20
MySQL-Version: 5.7.19
and I can protect my domains with a Let's Encrypt or a Sectigo SSL

My hosting also give me the option to forward http to https which I already setup and be using (check the screenshot pls):

(Ein is the german word for on)

Kind regards, Andy

P.S.: Those unsave avatar images got uploded before I was using SSL - maybe thats the problem?

I force https connections on my sites on the .htaccess file. It worked just fine with Codoforum.