reCaptcha validation over https - mixed content error

How to fix reCaptcha mixed content errors when enabling HTTPS.

Overview

The issue occurs because reCaptcha resources are being loaded over HTTP on an HTTPS site, causing browser security warnings.
In the CF Load Recaptcha action, set both the API server and secure server URLs to use HTTPS, and enable the SSL option. For the Check Recaptcha action, use the domain without a protocol.

Answered
di dieda12 31 Mar, 2017
Hi,

When turning on the https over my site, the reCaptcha stops working and the attached error appear inside the console. I tried changing the validation server url both to "https://www.google.com" and "//www.google.com" but it seems this does not affect the called url.
The reCaptcha Joomla! plugin seems set correctly to me (and it works if I turn off https).

What do I have to change to set the call to https instead of http ?

Thanks in advance.

Elena
Max_admin Max_admin 01 Apr, 2017
Answer
Hi Elena,

The "Load recaptcha" action has a setting for specifying the "secure server url", did you change that ? it should be set to an https link, and there is also a setting to choose if you want to load the image using the SSL server, taht should be enabled.

Best regards,
Max
Max, ChronoForms developer
ChronoMyAdmin: Database administration within Joomla, no phpMyAdmin needed.
ChronoMails simplifies Joomla email: newsletters, logging, and custom templates.
di dieda12 05 Apr, 2017
1 Likes
Hi Max, you suggestion pointed me to the right direction! I've had the secure server set correctly but was keeping the api server without https.

In the end I have everything working with the following setup:

Load Recaptcha: https in BOTH url ("api server" and "api secure server") and SSL select set to YES.
Check Recaptcha: "verify server" simply www.google.com with no protocol inside.

Thanks for the assistance

Elena
This topic is locked and no more replies can be posted.