Chrome blocking filesystem tarball download due to requesting http resource from https page.

s-macke / jor1k

Online OR1K Emulator running Linux

http://jor1k.com

BSD 2-Clause "Simplified" License

1.73k stars 196 forks source link

Chrome blocking filesystem tarball download due to requesting http resource from https page. #106

Closed benjamincburns closed 8 years ago

benjamincburns commented 8 years ago

Per title, filesystem tarball can't be restored on chrome from github demo page.

Mixed Content: The page at 'https://s-macke.github.io/jor1k/demos/main.html?user=ss1BsNOW9s' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://jor1k.com/sync/tarballs/ss1BsNOW9s.tar.bz2'. This request has been blocked; the content must be served over HTTPS.

s-macke commented 8 years ago

Yes, I know. The same problem we had with your websocket connection. Since Google automatically changed to https if availabe everyone receives the encrypted page. Hence, the connection to another server must be encrypted as well. Actually my plan is to wait for the "Let's encrypt" service from Mozilla to get a cheap certificate for this. At the moment you have to change to the non-encrypted jor1k website for this "cloud" service.

benjamincburns commented 8 years ago

I'd be happy to spring for a 1 year cert from my provider if you'd like.

s-macke commented 8 years ago

Yeah, that would be great :) Have never configured my webserver for https. What do you need?

benjamincburns commented 8 years ago

I'm not 100% certain yet. Setting it up is usually no drama. I'll likely just be able to send you a .crt to install. I'll have a look tomorrow and get in touch.

s-macke commented 8 years ago

https://github.com/s-macke/jor1k/commit/e969123f6a79fd1aff03e690e13fdabefbc7a003 Fixed