Could the new google analytics be causing my SSL to be insecure?

March 16, 2009 4:01 AM

Anyone familiar with making SSL work with Google Analytics and Drupal?

I'm currently working on a website for work. I have my SSL cert installed, but when I try to connect securely, it keeps complaining that a part of the site is insecure. I finally think I've narrowed it down to the Google Analytics code we're using (it's the new, supposedly self switching code, not the old manual code). Is it possible that it's causing trouble because I have it in the "footer" section of my Drupal UI? If so, how else do I install it? Or am I WAY off base, and it's actually an issue some where else?

The site, for reference, is www.mailritevt.com.

Thank you in advance!

posted by TrueVox to computers & internet (5 answers total)

You're downloading a javascript file from Google when you're using Analytics. If you're on an HTTPS site and downloading the .js file from an HTTP site most (or all at this point) browsers will complain about unsigned content.

You need to use the SSL URL when pointing the analytics javascript file. Google has provided a helpful how-to.
posted by purephase at 4:54 AM on March 16, 2009

Looks like you may have implemented this after posting your question. The site loads fine for me.
posted by purephase at 4:55 AM on March 16, 2009

Google Analytics' code (at least, the updated code) automatically handles fetching the correct http/s javascript file. The important part:

"https:" == document.location.protocol ? "https://ssl." : "http://www."

posted by Civil_Disobedient at 8:00 AM on March 16, 2009

Thank you both, but I'm still having the issue, even on multiple computers. I haven't changed anything, yet (nor did I after posting the question).

Could my use of Lightbox be effecting it?

btw, sorry for not answering sooner, been slammed at work all day since I posted first.
posted by TrueVox at 2:41 PM on March 16, 2009

WAIT! You're RIGHT, Civil! THANK YOU!!!
posted by TrueVox at 5:36 PM on March 16, 2009