# Changing site to https and all asset images are loaded over http

**URL:** <https://forums.realmacsoftware.com/t/changing-site-to-https-and-all-asset-images-are-loaded-over-http/22942>\
**Category:** RapidWeaver Classic\
**Created:** [October 21, 2018, 11:31pm UTC](https://forums.realmacsoftware.com/t/changing-site-to-https-and-all-asset-images-are-loaded-over-http/22942 "2018-10-21T23:31:43Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![devananda](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/devananda/32/13413_2.png) [@devananda](https://forums.realmacsoftware.com/u/devananda)\
**Post date:** [October 21, 2018, 11:31pm UTC](https://forums.realmacsoftware.com/t/changing-site-to-https-and-all-asset-images-are-loaded-over-http/22942/1 "2018-10-21T23:31:43Z")

</div>

I just changed http to https on this site

> **[HOME | BEAUFORT CONSTRUCTION: A HERITAGE OF INTEGRITY](https://beaufortconstruction.net/)**
>
> Beaufort Construction has a heritage of integrity. We are a local commercial general contractor with generations of experience.

and now when we go to [https://beaufortconstruction.net/testimonials/](https://beaufortconstruction.net/testimonials/) the images that I dragged into one stack (there is no option for warehousing in this particular stack) are all showing an error in the browser console that the image is served over https but requested http.

is there a way to get around this error? Or do I need to drag each image into the stack again in order for it to load over https?

---

<div class="post-metadata">

**Author:** ![pmjd](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/pmjd/32/18671_2.png) [@pmjd](https://forums.realmacsoftware.com/u/pmjd)\
**Post date:** [October 22, 2018, 12:45am UTC](https://forums.realmacsoftware.com/t/changing-site-to-https-and-all-asset-images-are-loaded-over-http/22942/2 "2018-10-22T00:45:18Z")

</div>

All looks fine to me, also checked it with whynopadlock and had no warnings for mixed content.

---

<div class="post-metadata">

**Author:** ![peterdanckwerts](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/peterdanckwerts/32/22443_2.png) [@peterdanckwerts](https://forums.realmacsoftware.com/u/peterdanckwerts)\
**Post date:** [October 22, 2018, 3:59pm UTC](https://forums.realmacsoftware.com/t/changing-site-to-https-and-all-asset-images-are-loaded-over-http/22942/3 "2018-10-22T15:59:14Z")

</div>

Chrome says that the connection is not fully secure because of the pictures. Did you change the web address to https in the Settings/General tab? This should automatically change the image links when you republish.

---

<div class="post-metadata">

**Author:** ![Anonymous1](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/anonymous1/32/8462_2.png) [@Anonymous1](https://forums.realmacsoftware.com/u/Anonymous1)\
**Post date:** [October 23, 2018, 4:35pm UTC](https://forums.realmacsoftware.com/t/changing-site-to-https-and-all-asset-images-are-loaded-over-http/22942/4 "2018-10-23T16:35:18Z")

</div>

I am _not_ seeing the padlock in mobile Safari, so something is indeed wrong.

Be it Safari, Chrome, or other, the Dev Inspector should show errors for the mixed (non-HTTPS) content.

If you’re unable to find the source, you can use a Content Security Policy to force everything to load over HTTPS.

> **[CSP: upgrade-insecure-requests - HTTP | MDN](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/upgrade-insecure-requests)**
>
> The HTTP Content-Security-Policy (CSP)
> upgrade-insecure-requests directive instructs user
> agents to treat all of a site's insecure URLs (those served over HTTP) as though they
> have been replaced with secure URLs (those served over HTTPS). This...

---

<div class="post-metadata">

**Author:** ![manofdogz](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/manofdogz/32/26314_2.png) [@manofdogz](https://forums.realmacsoftware.com/u/manofdogz)\
**Post date:** [October 23, 2018, 8:09pm UTC](https://forums.realmacsoftware.com/t/changing-site-to-https-and-all-asset-images-are-loaded-over-http/22942/5 "2018-10-23T20:09:39Z")

</div>

Looks secure now. However take a critical look on a smartphone - there are other issues to do with layout and some pixelated images. As we say to builders in the uk, needs a little snagging.

---

<div class="post-metadata">

**Author:** ![devananda](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/devananda/32/13413_2.png) [@devananda](https://forums.realmacsoftware.com/u/devananda)\
**Post date:** [October 23, 2018, 8:23pm UTC](https://forums.realmacsoftware.com/t/changing-site-to-https-and-all-asset-images-are-loaded-over-http/22942/6 "2018-10-23T20:23:26Z")

</div>

Thank y’all for the responses (although with mixed reviews I am slightly confused).

---

<div class="post-metadata">

**Author:** ![Anonymous1](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/anonymous1/32/8462_2.png) [@Anonymous1](https://forums.realmacsoftware.com/u/Anonymous1)\
**Post date:** [October 23, 2018, 11:30pm UTC](https://forums.realmacsoftware.com/t/changing-site-to-https-and-all-asset-images-are-loaded-over-http/22942/7 "2018-10-23T23:30:37Z")

</div>

Your site is definitely loading mixed content. Its visitors will not see the padlock. Use the Dev Inspector. You can see exactly what’s loading over HTTP.

 ![mixed-content](https://europe1.discourse-cdn.com/flex005/uploads/realmacsoftware1/original/2X/c/c91d45b328525aca29f359ca44b285c8363ddd30.png)

---

<div class="post-metadata">

**Author:** ![devananda](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/devananda/32/13413_2.png) [@devananda](https://forums.realmacsoftware.com/u/devananda)\
**Post date:** [October 24, 2018, 1:32am UTC](https://forums.realmacsoftware.com/t/changing-site-to-https-and-all-asset-images-are-loaded-over-http/22942/8 "2018-10-24T01:32:30Z")

</div>

thanks. I figured it out. I had the impact settings to “collapse in edit mode” so I was not seeing the other images in impact. Thank you.

---

<div class="post-metadata">

**Author:** ![system](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/system/32/25301_2.png) [@system](https://forums.realmacsoftware.com/u/system)\
**Post date:** [November 23, 2018, 11:32am UTC](https://forums.realmacsoftware.com/t/changing-site-to-https-and-all-asset-images-are-loaded-over-http/22942/9 "2018-11-23T11:32:37Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
