Bug #35449: https (SSL) for extension images - TYPO3 Core - TYPO3 Forge

Custom queries

12 LTS
Accessibility
Dashboard issues
Easy tasks
Extbase Issues
FAL Issues
FAL Sprint 2023
Hierarchical Issues
Issues reported for v11
JavaScript issues
JavaScript Issues (w/o Epics/Stories)
Most wanted Bugfixes
Most wanted Features
My open issues
New & Unassigned
No feedback within 90 days
Open Bugs
Open issues of 10
Page Tree Regressions after 2020-07-28
Recently modified
Regressions
Stabilization Issues
Usability or UX

Watchers (1)

Jigal van Hemert

Actions

Copy link

Bug #35449

closed

https (SSL) for extension images

Added by Xaver Maierhofer about 12 years ago. Updated almost 10 years ago.

Status:

Closed

Priority:

Could have

Assignee:

Category:

Extension Manager

Target version:

Start date:

2012-04-01

Due date:

% Done:

Estimated time:

TYPO3 Version:

4.6

PHP Version:

5.3

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

First thx for ssl secure ter images.

Secure connection for extension-icons in em search.
Only problem is typo3.org is only hoster with a valid SSL certificate.
If backend is SSL with icons must load from typo3.org.

e.g. (i don't know the code ;) )
if(SSL){
$mirror['imageurl'] = "https://typo3.org/fileadmin/"
}

History
Notes
Property changes

Actions

Copy link

Updated by Georg Ringer about 12 years ago

Subject changed from https (SSL) for extansion images to https (SSL) for extension images

Actions

Copy link

Updated by Georg Ringer about 12 years ago

https://www.typo3.org/fileadmin/templates/images/logo-tu-clausthal.gif seems to work fine?

Actions

Copy link

Updated by Xaver Maierhofer about 12 years ago

if i have random mirror, i get the image from http://tar.mittenwald or http://typo3.org/fileadmin and no https

Actions

Copy link

Updated by Jigal van Hemert about 12 years ago

Status changed from New to Needs Feedback

What is the exact problem with the extension icons not being fetched through an SSL connection? It's from a different domain than your backend, so it would not use the same certificate anyway.

Actions

Copy link

Updated by Xaver Maierhofer about 12 years ago

If i have a lot of personal informations in backend to handle and an SSL certificate.

I use this settings:
$TYPO3_CONF_VARS['BE']['lockSSL'] = '1';
$TYPO3_CONF_VARS['BE']['lockSSLPort'] = '443';

And if any source without a ssl certificate is loaded -> the addressbar will turn normal (white).
If you go back to list to handle personal informations the addressbar won't ensure everything is encrypted, because with frames the content (mainframe isn't reloaded).

Actions

Copy link

Updated by Jigal van Hemert about 12 years ago

This requires a change in the mirror list file I'm afraid. There are installation which are limited in the external domains they have access to. In such cases there is a specific mirror selected.
Also, a mirror might have a different host and/or path for secure images (e.g. Twitter has http://a0.twitter.com/... for avatar images and https://si0.twitter.com/... for avatars over SSL). So, we need to add host_ssl and path_ssl to the mirror list.
If a random mirror is used the code should select one of the mirrors which has a secure host/path setting.

First it should be determined if the mirror file can be expanded.

Actions

Copy link