Skip to Content
avatar image
Former Member

HTTPS in portal switches to HTTP for theme pages

We are using HTTPS for our entire portal implementation. When we access our portal, however, we get a pop up warning to select whether or not we want to display non-secure content. I ran HTTPWATCH and found that this occurs when, for some reason after logging into my session with HTTPS, the portal switches over to HTTP for the theme only. When I click yes, the portal loads the theme (http) and then switches back to HTTPS for everything else.

Ideally, every single call in the portal needs to be HTTPS. I don't want to require users enable IE to allow mixed modes to avoid the pop up.

Any other ideas how this can be done? Is there a setting somewhere that tells the portal to load the theme with HTTP instead of HTTPS?

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

6 Answers

  • Jul 14, 2016 at 04:14 AM

    Hi,

    Hope this email finds you well.

    Have you got any solution for this issue.

    We have the same issue what you had:

    Regards,

    Mohammad Anoarul Islam

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Mar 09, 2011 at 11:51 PM

    What exactly do you mean by saying "Theme pages".

    Is the application trying to load a portal theme or a theme from a backend system ? (ITS or BSP)

    The request where the mixed content pop up occurs, which server is the request made to ?

    If you have configured SSL on your portal, you would not need to do any thing specific for the themes to work properly.

    Can you post the http request at which it tries to switch to http ?

    - Shanti

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jan 31, 2012 at 04:30 PM

    In an HTTP Watch session, we accessed the portal with https://<host> and logged in. We observe the entire page and contents being loaded as HTTPS with the exception of the custom theme, which shows an HTTP access.

    Below is the output of httpwatch from a simple login to the consumer portal. The very last line shows that it is, for some reason, trying to load the theme via HTTP.

    https://<myhost>/irj/portal

    https://<myhost>/irj/portal

    https://<myhost>/irj/portalapps/com.sap.portal.design.portaldesigndata/themes/portal/ZGlobalSelfService/prtl_std/prtl_std_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.design.portaldesigndata/themes/portal/ZGlobalSelfService/glbl/glbl_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.epcf.loader/script/optimize/js13_epcf.js?7.01000081

    https://<myhost>/irj/portalapps/com.sap.portal.httpconnectivity.httpauthentication/scripts/CAManagerScript.js

    https://<myhost>/irj/portalapps/com.sap.portal.navigation.helperservice/scripts/HistoryFramework.js

    https://<myhost>/irj/portalapps/com.sap.portal.navigation.helperservice/scripts/NavigationFramework.js

    https://<myhost>/irj/portalapps/com.sap.portal.navigation.helperservice/scripts/FrameworkSupport.js

    https://<myhost>/irj/portalapps/com.sap.portal.navigation.afp.resources/scripts/lsapi.js

    https://<myhost>/irj/portalapps/com.sap.portal.navigation.afp.resources/scripts/helpCenterPlugin.js

    https://<myhost>/irj/portalapps/com.sap.portal.navigation.afp.resources/scripts/JSUtils.js

    https://<myhost>/irj/portalapps/com.sap.portal.pagebuilder/scripts/pagesupport.js

    https://<myhost>/irj/portalapps/com.sap.portal.design.portaldesigndata/themes/portal/ZGlobalSelfService/prtl/prtl_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_fc_05_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_efc_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/controls_ie5.js

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/sapUrMapi_ie6.js

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/popup_ie6.js

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/languages/urMessageBundle_en.js

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_fc_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.navigation.toplevel/scripts/toplevelnavigation.js

    https://<myhost>/irj/portalapps/com.sap.portal.navigation.pagetoolbar/scripts/pageToolbar.js

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_pop_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/emptyhover.html

    https://<myhost>/irj/portalapps/com.sap.portal.pagebuilder/html/EmptyDocument.html

    https://<myhost>/irj/servlet/prt/portal/prtroot/pcd!3aportal_content!2fcom.Z.pct!2fcom.Z.every_user!2fDesktop!2fdefaultDesktop!2fframeworkPages!2fcom.Z.frameworkpage!2fcom.sap.portal.innerpage?windowId=WID1328026224912

    https://<myhost>/irj/portalapps/com.sap.portal.design.portaldesigndata/themes/portal/ZGlobalSelfService/prtl_std/prtl_std_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.design.portaldesigndata/themes/portal/ZGlobalSelfService/glbl/glbl_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.epcf.loader/script/optimize/js13_epcf.js?7.01000081

    https://<myhost>/irj/portalapps/com.sap.portal.pagebuilder/scripts/pagesupport.js

    https://<myhost>/irj/portalapps/com.sap.portal.layouts.framework/scripts/WAandNavPanel.js

    https://<myhost>/irj/portalapps/com.sap.portal.design.portaldesigndata/themes/portal/ZGlobalSelfService/nav/nav_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_tray_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.navigation.contentarea/scripts/workArea.js

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_efc_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/controls_ie5.js

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/sapUrMapi_ie6.js

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/popup_ie6.js

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/languages/urMessageBundle_en.js

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_fc_05_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_fc_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_pop_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/emptyhover.html

    https://<myhost>/irj/portalapps/com.sap.portal.pagebuilder/html/EmptyDocument.html

    https://<myhost>/irj/servlet/prt/portal/prtroot/pcd!3aportal_content!2fcom.Z.pct!2fcom.Z.every_user!2fDesktop!2fdefaultDesktop!2fframeworkPages!2fcom.Z.frameworkpage!2fcom.sap.portal.innerpage!2fcom.Z.BI_Portal_Favorites

    https://<myhost>/irj/portalapps/com.sap.portal.navigation.contentarea/html/blank.html

    https://<myhost>/irj/portalapps/com.sap.portal.pagebuilder/html/EmptyDocument.html

    https://sapapp.Z.com/sap/bc/webdynpro/scf/snc_c/;sap-ext-sid=M7IVaeEe_LhaflQHlGVlPw XRdCe4Hx5EG3CXQc8WFAUw ?sap-ep-iviewhandle=0071667078771&sap-wd-configId=&sap-ep-iviewid=pcdshort%3A%2Fn0AP027OHA4T+qakIVsgHN8pU1o%3D&sap-ep-pcdunit=pcdshort%3A%2F1C0vSaqixd9wtRwVWDIkSn1x128%3D&sap-client=100&sap-language=EN&sap-accessibility=&sap-rtl=&sap-ep-version=7.0109.20110902065640.0000&sap-wd-tstamp=1328026833309&sap-explanation=&sap-cssurl=http%3A%2F%2F<myhost>%3A80%2Firj%2Fportalapps%2Fcom.sap.portal.design.urdesigndata%2Fthemes%2Fportal%2FZGlobalSelfService%2Fur%2Fur_ie6.css%3F7.1.9.1.1&sap-cssversion=7.11.7.31.0&sap-tray-type=PLAIN&sap-tray-padding=X

    https://<myhost>/irj/portalapps/com.sap.portal.design.portaldesigndata/themes/portal/ZGlobalSelfService/prtl_std/prtl_std_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.design.portaldesigndata/themes/portal/ZGlobalSelfService/glbl/glbl_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.epcf.loader/script/optimize/js13_epcf.js?7.01000081

    https://<myhost>/irj/servlet/prt/portal/prtroot/com.sap.km.cm.navigation/userhome/DINGERSOLL/favorites?rndLayoutSet=PortalFavoritesExplorer

    https://<myhost>/irj/portalapps/com.sap.portal.design.portaldesigndata/themes/portal/ZGlobalSelfService/prtl_std/prtl_std_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.design.portaldesigndata/themes/portal/ZGlobalSelfService/glbl/glbl_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.epcf.loader/script/optimize/js13_epcf.js?7.01000081

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_fc_05_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/controls_ie5.js

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/sapUrMapi_ie6.js

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/popup_ie6.js

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/languages/urMessageBundle_en.js

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_efc_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ur/ur_fc_ie6.css?7.1.9.1.1

    https://<myhost>/irj/portalapps/com.sap.portal.htmlb/jslib/emptyhover.html

    https://sapapp.Z.com/sap/public/bc/ur/nw7/js/domainrelax.js?21C1DFDF5403

    https://sapapp.Z.com/sap/public/bc/ur/nw7/js/lightspeed.js?21C1DFDF5403

    https://sapapp.Z.com/sap/public/bc/webdynpro/ssr/wda_ls_main.js?version=20110926-055743

    http://<myhost>/irj/portalapps/com.sap.portal.design.urdesigndata/themes/portal/ZGlobalSelfService/ls/ls_ie6.css?7.1.9.1.1

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Hi,

      do you run the portal in a federated portal network scenario? If this is the case, check whether the federation is configured using HTTPS.

      Best regards,

      Mario

  • Sep 24, 2015 at 12:28 PM

    Dear VSP-ERP Support,

    Sorry to ask after these many years. But we are facing the same problem. Were you able to solve your issue? If yes, could you please share the solution.

    I searched in many forums but could not find a solution for the issue anywhere.

    Thanks,

    Bhavya

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Oct 08, 2015 at 12:46 PM

    Hi Bhavya,

    If the portal is already set to https but only the css-url is being built with http, you need to configure a proxy mapping in your j2ee engine.

    Here is the SAP Note (KBA) which summarized your issue:

    1643446 - Nonsecure Content Warning For Theme Resources When Calling
    the Portal Via a Load Balancer / Reverse Proxy
    .

    Regards,

    Mahmoud

    Add comment
    10|10000 characters needed characters exceeded

  • Jul 14, 2016 at 10:32 AM

    Hi Everyone

    I hope you are all keeping well and many thanks for using the SAP Discussion Forums 😊.

    As per the Initial problem statement:

    • Using HTTPS for our entire portal implementation.  When you access the portal, however, you encounter pop up warning to display non-secure content. HTTPWATCH reveals that after logging into the session with HTTPS, the portal switches over to HTTP for the theme only. 

    Ok firstly regarding the switch to HTTP solely for the theme this is indeed strange behavior.

    Could you kindly provide clarification on the following:

    • Is this issue occurring for each and every user/in all Web Browser Platform types?
    • Can this be reproduced in all Portal Themes & Framework combinations?

    From a high level perspective naturally for external facing systems and any form of production systems HTTPS should always be used.

    - Could you kindly confirm that SSO is setup, configured and running without any issues?

    Kindly take a look at the following knowledge based article which offers a comprehensive overview on this particular topic and offers a descriptive insight:

    - SAP KBA: 1857366 - No Switch to HTTPS occurred

    In true essence as the note highlights this popup exception warning deals with and is associated to no switch to https occurring (https recommended) so the password set to be transmitted encrypted and hence not in a secure manner.

    There are several possibles reasons for this particular warning to appear and it typically comes down to SSO/SSL configuration discrepancies and a resolution to such a popup warning is particular to each customer system and setup.

    In addition to the above documentation the follow blog posting offers further guidance and reference information which will provide you with a solution.

    http://scn.sap.com/people/glenn.cadman/blog/2013/02/20/hide-protocol-cannto-be-switched-to-https-https-is-not-configuredactive-no-sw itch-to-https-occured-so-it-is-not-secure-to-send-a-password

    Kindly update me as per your findings.

    Kind Regards

    Troy Cronin - Enterprise Portal Support Engineer

    Follow @Troy Cronin

    Add comment
    10|10000 characters needed characters exceeded