search

coecms / dataportal

CoE Data Server Puppet Configs
climate-cms.nci.org.au
Apache License 2.0
0 stars 0 forks source link

godiva2 mixed content #20

Open paolap opened 9 years ago

paolap commented 9 years ago

There's an issue with godiva2, to show the file content, it is trying to load some styling files over http, But the server is suing https and doesn't allow mixed content. Here is one the error raised when godiva2 starts up and try to load a file.

Mixed Content: The page at 'https://climate-cms.nci.org.au/thredds/godiva2/godiva2.html?server=http://c…SS_Data/ACCESS1-3b_AMZDEF/Processed/049GPwc.tas_pr_monthly_TS.1978_2011.nc' was loaded over HTTPS, but requested an insecure resource 'http://yui.yahooapis.com/2.5.2/build/container/container-min.js'. This request has been blocked; the content must be served over HTTPS.

Apparently there are two possible solutions (from Ming at TPAC, not me :-)) : degrade the security level to allow mixed content or thredds portal should use http instead of https

ScottWales commented 9 years ago

This has been temporarily fixed by editing the Godiva html file to use https://yui-s.yahooapis.com/2.8.0. Also needed to change the javascript to use a source-relative url for the server URL. This fix needs to be made more permanent

paolap commented 9 years ago

Another mixed content, which stops the ocean data to be viewed properly

Mixed Content: The page at 'https://climate-cms.nci.org.au/thredds/godiva2/godiva2.html?server=http://climate-cms.nci.org.au/thredds/wms/Ocean_Data/output010/ocean_scalar.nc' was loaded over HTTPS, but requested an insecure image 'http://www.resc.reading.ac.uk/images/new_logo_72dpi_web.png'. This content should also be served over HTTPS.

ScottWales commented 9 years ago

That shouldn't be breaking anything (it's just the Reading logo)

paolap commented 9 years ago

it doesn't give an error, but still it can't show the data correctly, ok I'll see if there's another reason

Ok sorry my fault, didn't check properly the data is not a grid :-)