I use HAProxy trying to do SLL offloading for a WordPress site. Frontend is on 80 and 443 with redirect <redirect scheme https code 301 if !{ ssl_fc }> Redirection is working well when the page is accessed on port 80. However the pages loads incomplete and looking in the console of Firefox/Chrome…

You should probably let the back end server know the client is using SSL so it sends https:// links, not http:// with this or something similar (in your frontend): # Let the real servers know this was originally a HTTPS request http-request add-header X-Forwarded-Proto https If that fails, you can…

Tnx for the reply, but it doesn’t solve the issue. Only thing that seems to work is: rspadd Content-Security-Policy:\ upgrade-insecure-requests But not all browser (Edge…) do support that.

Hi, this is a problem in the backend server, you have to set the “ssl on”, because of the ssl termination in haproxy level, and the browser send a https request but the backend response as a http, browser will block the response. please enable the ssl on the backend

Hi, Enabling ssl on the backend will only work if the content is also on the same server/subnet behind the HAP server. I also had this problem a few times and found that the backend server is making http requests even though it is being accessed as https. Many times in your code on the backend serve…

If I recall this can be a common problem if you dynamically load things like css frameworks, e.g. Bootstrap or things like font libraries, etc. What will happen is that those items referenced in your code will be using something like http://fonts.google.com and are not actually retrieved by the pro…

I’m sure you’ll find an answer in this very useful Reddit thread: https://www.reddit.com/r/Wordpress/comments/5pjowi/mixed_content_with_ssl_wordpress_behind_a_reverse/

http-request add-header X-Forwarded-Proto https did the trick for me. I’m using haproxy for ssl termination to a private nexus docker repo. Thanks

[image] wickeren: rspadd Content-Security-Policy:\ upgrade-insecure-requests Thanks, this is the only thing that helped.

Thanks a lot; it worked after slight modification http-response set-header Content-Security-Policy upgrade-insecure-requests

Thanks, I tried all the earlier suggestions, but once I added this last item (which is relevant for the version of haproxy I am running 2.2.3), it solved my problem too (so I can’t say the other suggestions didn’t work, but the http-response set-header content-security-policy upgrade-insecure-reques…

Mixed content warning when using HTTPS

Help!

surena13 January 29, 2022, 12:30pm 12

Thanks a lot. that was resolution for me.

Topic		Replies	Views
HAProxy and 'Loading mixed (insecure) display content' warnings on http backend Help!	3	572	December 31, 2019
Mixing mode tcp and http - SSL termination and Passthrough Help!	19	43094	September 19, 2025
Apache Creating Non HTTPS Link When Using SSL Termination Help!	2	1776	September 14, 2018
HAProxy 1.8 does not redirect all http to https Help!	3	981	January 16, 2019
Can't connect to HTTPS frontend Help!	12	6879	March 20, 2020

Mixed content warning when using HTTPS

Related topics