Download Bug with Chrome

[olizan]

Hi,

I have a problem since the last chrome update. Any zip file can't be downloaded.
Here is the console result :

Mixed Content: The site at 'https://www.ffw-01.fr/'; was loaded over a secure connection, but the file at '.../jdownloads/.../escapetokadena.zip' was redirected through an insecure connection. This file should be served over HTTPS. This download has been blocked. See https://blog.chromium.org/2020/02/protecting-users-from-insecure.html for more details.


It works when i right click and choose "download from link".

There are no problems with others navigators
Olivier

[olizan]

My domain is secured with Letsencrypt

[olizan]

My domain is secured with Letsencrypt

This page is secure (valid HTTPS).
Certificate - valid and trusted
The connection to this site is using a valid, trusted server certificate issued by R3.
View certificate
Connection - secure connection settings
The connection to this site is encrypted and authenticated using TLS 1.2, ECDHE_RSA with X25519, and CHACHA20_POLY1305.
Resources - all served securely
All resources on this page are served securely.

[olizan]

Console network by chrome :

When i click on download button, the link is redirected on non secure link : http://www......

But, i can download a non zip file

[ColinM]

HiIs the site itself using an http: or an https:  ?As you have a 'security certificate'  it is probable that somewhere you have set http rather than httpsOne way of getting round this is to go to
System - Global Config - Server tab and set option 'Force HTTPS' to Yes
Colin

[olizan]

parameter ok. Force ssl already check for both.

[schmatzler]

I have the same problem with the latest JDownloads.
My site is running via HTTPS and it's also forced in Joomla's server settings.

I get this really weird error in Chrome when trying to download a file:
Mixed Content: The site at 'https://i-war2.com/'; was loaded over a secure connection, but the file at 'https://i-war2.com/...zip'; was redirected through an insecure connection. This file should be served over HTTPS.

That's really weird, because both URLs start with HTTPS. So maybe there's another redirect in there Chrome doesn't like or something else...?

For now I've resorted to serving the files via PHP but some files are really big and might fail because of the execution time limit. Not an ideal solution.

[ColinM]

Hi
Chrome is a law unto itself!!
Are the zip files those that you have uploaded or are they zip files created by jD from a checkbox files layout?
Colin