Chrome 中的部分 SSL
在 SSL 和 Chrome (12.0) 中访问我的网站时，我得到
您与某个网站的连接是 使用 256 位加密进行加密。 但是，此页面还包括其他内容 不安全的资源。这些 资源可以被其他人查看 在运输途中，可以修改 由攻击者改变行为 页面的。
连接使用 TLS 1.0。
连接使用加密 AES-256_CBC，消息使用 SHA1 身份验证和 DHE_RSA 作为密钥 交换机制。
连接被压缩 放气。
我使用 FireBug （NET 选项卡） 和 Chrome Inspector 进行搜索，所有资源均通过 https< 访问/强>。问题出在哪里？ *我已经清除了缓存
可能是什么问题？
Visiting my site in SSL and in Chrome (12.0) I get
Your connection to someWebsite is
encrypted with 256-bit encryption.
However, this page includes other
resources which are not secure. These
resources can be viewed by others
while in transit, and can be modified
by an attacker to change the behaviour
of the page.The connection uses TLS 1.0.
The connection is encrypted using
AES-256_CBC, with SHA1 for message
authentication and DHE_RSA as the key
exchange mechanism.The connection is compressed with
DEFLATE.
I searched with FireBug (NET tab) and Chrome Inspector and all resources are accessed via https. Where is the problem? *I cleared the cache already
What could be the problem?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（6）
如果您访问了同一域中包含混合内容的另一个 https 页面，Chrome 将会出现此错误，但如果您尝试清除缓存，则这应该不是问题。
Chrome will give this error if you've visited another https page on the same domain that had mixed content however this should not be the problem if you've tried clearing your cache.
您可能想尝试使用 JavaScript 控制台的 Ctrl-Shift-J，它应该显示不安全的内容。
You might want to try Ctrl-Shift-J for the JavaScript console, it should show the insecure content.
我也有同样的事情 - 我从 Google Chrome 帮助网站上了解到该网站上的元素未加密 - 例如视频。我通过 Firefox 查看 - 右键单击 -> 查看页面信息 -> 媒体选项卡，发现每次我在视频播放器中使用 YouTube 视频时，我都会看到纯 http 地址，例如：
http://s.ytimg.com/yt/swfbin/watch_as3-vflrEm9Nq.swf 和
http://img.youtube.com/vi/V6JgyNy59yA/1.jpg
我认为这些非 https 链接导致了整个站点的安全消息。因此，使用来自 3rd 方网站的视频似乎总是会在 Google Chrome 中针对 https 页面引发安全错误。
这就是我的答案 - 但我还没有解决方案。我需要能够在我们的新闻部分分享来自 youTube 的视频，但我的在线商店部分需要使用 https，而不需要为我的客户提供可怕的红色字母和斜线。
有人有效处理过这个问题吗？
谢谢
I have the same thing - and I read from the Google Chrome help site that elements on the site are not encrypted - like videos. I looked via Firefox - right click->View Page Info->Media tab and saw that every time I use a YouTube video in my video player I have plain http addresses like:
http://s.ytimg.com/yt/swfbin/watch_as3-vflrEm9Nq.swf and
http://img.youtube.com/vi/V6JgyNy59yA/1.jpg
I think these non https links are causing the security message site-wide. Thus, it appears using videos from 3rd party sites will always throw a security error in Google Chrome for https pages.
That's my answer - but I have no solution yet. I need to be able to share videos from youTube in our news section, but my online store section needs to use https without scary red letters and slashes through it for my clients.
Has anyone dealt with this effectively?
Thanks
我的 Magento 网站也有同样的问题。请务必将所有图像和 js 链接（甚至在 .css 中）从 http:// 更改为简单的 //。为我解决了。
Had the same problem on my Magento Site. Be sure to change all image and js links (even in .css) from http:// to simply //. Solved it for me.
我遇到了同样的问题，我的问题是一些 img 标签的 src 为
http而不是https，即使它们链接到其他域（如<）也没关系;img src="http://otherdomain.com/image.jpg" />它仍然显示该警告。当我将所有内部和外部 img 链接更改为https后，警告就消失了。I had the same issue, my problem was that some img tags had src to
httpinstead ofhttps, it does not matter even they link to other domain like<img src="http://otherdomain.com/image.jpg" />it still shows that warning. As soon as I changed all internal and external img links tohttpsthe warning disappeared.如果您检查页面并且似乎没有不安全的内容，请检查以确保页面上的某些内容没有将数据提交到不安全的位置。
内容应通过 HTTPS 提交，而不是 HTTP。
If you check the page and it seems to have no insecure content, check to make sure that something on the page is not submitting data to an insecure location.
Content should be submitted over HTTPS, not HTTP.