search

whiteoctober / IATI

AidView
aidview.net
7 stars 3 forks source link

Error message when going to AidView through https #73

Open siwhitehouse opened 11 years ago

siwhitehouse commented 11 years ago

Hi there

I've had a couple of reports from colleagues over recent weeks that they have received the error shown below

aidview warning Apr 2013

I can replicate it on my machine (Windows 7) using Chrome, with similar errors showing in FireFox and Internet Explorer. I don't get that error if I go to http://www.aidview.net, but I replicate it at https://aidview.net.

Is this a quick fix? We're going live on Thursday!

ghost commented 11 years ago

Oh!

http://grab.by/lE9u (you need to visit the https://aidvidew.net, if that helps you replicate)

Looks like a certificate mismatch (.heroku.com -> .aidview)

I guess the choices are:

redirecting the user would be a small code change (though I'm not totally sure when I'd get the chance to do this).

Ben

On Mon, Apr 15, 2013 at 3:52 PM, Simon Whitehouse notifications@github.comwrote:

Hi there

I've had a couple of reports from colleagues over recent weeks that they have received the error shown below

[image: aidview warning Apr 2013]https://f.cloud.github.com/assets/1718090/381243/7d6cf56a-a5db-11e2-9d3e-e5ecf34cd15b.JPG

I can replicate it on my machine (Windows 7) using Chrome, with similar errors showing in FireFox and Internet Explorer. I don't get that error if I go to http://www.aidview.net, but I replicate it at https://aidview.net.

Is this a quick fix? We're going live on Thursday!

— Reply to this email directly or view it on GitHubhttps://github.com/whiteoctober/IATI/issues/73 .

siwhitehouse commented 11 years ago

Hi Ben

I was hoping this might be a reasonably simple fix. I don't really have the technical nous to make a decision about what would be best to do here. I'll ask David to take a look and give his opinion.

In the meantime could you check when you might be able to do this for us, please? I'm aware we're outside the window we set for bug fixing.

siwhitehouse commented 11 years ago

Hi Ben

The general consensus is that we don't really need an https endpoint. So, can we go with the redirecting the user option please?

benfoxall commented 11 years ago

just looked into this, the redirect actually won't work (because the request wouldn't be trusted in the first place)

Mattdevinit commented 11 years ago

thanks - is there another simple way of avoiding people getting this warning message?