[Opengoo-develop] Weirdness in Firefox's lock icon when FengOffice's doc & presentation editors are served from https

[Kyle H. <ky...@ky...>]

Hi,

Would anyone happen to know why Firefox's lock icon breaks when
FengOffice's editor is started, when the entire site is behind https
served by Apache?

Here's the relevant portion of my Apache config file:

# If we need any special Directory permissions
<Directory "/var/www/sites/feng.kyanha.net">
DirectoryIndex index.php
SSLRequireSSL
</Directory>
<Directory "/var/www/cgi-bin/feng.kyanha.net">
Options +ExecCGI
DirectoryIndex none
</Directory>

# If we need any special handlers for specific locations
<Location "/">
</Location>

# The non-secure VirtualHost
<VirtualHost *:80>
ServerName feng.kyanha.net
#DocumentRoot "/var/www/sites/feng.kyanha.net"
RewriteEngine on
RewriteRule (.*) https://feng.kyanha.net$1 [R=301]
</VirtualHost>

# The secure VirtualHost
<VirtualHost *:443>
SSLEngine on
ServerName feng.kyanha.net
DocumentRoot "/var/www/sites/feng.kyanha.net"
ScriptAlias "/cgi-bin/" "/var/www/cgi-bin/feng.kyanha.net/"
</VirtualHost>
--
And here's the relevant portion of my config.php:

  define('ROOT_URL', 'https://feng.kyanha.net/');
  define('DEFAULT_LOCALIZATION', 'en_us');
  define('COOKIE_PATH', '/');
  define('DEBUG', false);
  define('DB_CHARSET', 'utf8');
--

The lock breaks after I open the Document editor, and the Presentation
editor.  I need to do an F5 full refresh to get it to resolve.  All
items under the Media tab of Page Info say that they're served from
https, but the lock icon shows a red circle with a white exclamation
point, and the Security tab of Page Info says "Parts of this page were
not encrypted before being sent over the Internet."

What is the set of URLs that get sent out to the client to parse,
either via IMAGE or EMBED tags?

As you can see, I redirect every non-SSL URI to the same URI under
HTTPS.  I can break that isomorphism and see what happens, but I'm not
sure it's going to help.  I'm going to dig in and see what I can see
(which means downloading the source for and compiling Firefox in a
debug configuration) later tonight.

Thanks for any help!

-Kyle H