{"action":"created","issue":{"url":"https://api.github.com/repos/h2o/h2o/issues/231","labels_url":"https://api.github.com/repos/h2o/h2o/issues/231/labels{/name}","comments_url":"https://api.github.com/repos/h2o/h2o/issues/231/comments","events_url":"https://api.github.com/repos/h2o/h2o/issues/231/events","html_url":"https://github.com/h2o/h2o/issues/231","id":61945844,"number":231,"title":"h2o SSL - chrome reporting insecure content when there is none ?","user":{"login":"centminmod","id":5899584,"avatar_url":"https://avatars.githubusercontent.com/u/5899584?v=3","gravatar_id":"","url":"https://api.github.com/users/centminmod","html_url":"https://github.com/centminmod","followers_url":"https://api.github.com/users/centminmod/followers","following_url":"https://api.github.com/users/centminmod/following{/other_user}","gists_url":"https://api.github.com/users/centminmod/gists{/gist_id}","starred_url":"https://api.github.com/users/centminmod/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/centminmod/subscriptions","organizations_url":"https://api.github.com/users/centminmod/orgs","repos_url":"https://api.github.com/users/centminmod/repos","events_url":"https://api.github.com/users/centminmod/events{/privacy}","received_events_url":"https://api.github.com/users/centminmod/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-03-16T02:25:05Z","updated_at":"2015-03-16T03:33:17Z","closed_at":null,"body":"I am using H2O 1.1.1 with SSL config outlined at https://github.com/h2o/h2o/issues/230\r\n\r\nUsing Comodo based SSL wildcard certificate\r\n\r\n**Problem**\r\nWhen I view the H2O SSL served site on port 8081 pages and even individual images loaded in Chrome are reported by Chrome as having insecure content served. But how is that possible even when loading an individual image i.e. cmlogo.png over https:// ? Chrome / HTTP/2 issue or H2O issue ?\r\n\r\n* Chrome Version 41.0.2272.89 m\r\n* Windows 8 64bit\r\n\r\n![](http://centminmod.com/h2o/screenshots/ssl/h2o_insecure_content_00.png)\r\n\r\ncheck https SSL on port 8081 for H20 server using [cipherscan](https://github.com/jvehent/cipherscan)\r\n\r\n    ./cipherscan XXX.centminmod.com:8081        \r\n    ..............\r\n    Target: XXX.centminmod.com:8081\r\n    \r\n    prio  ciphersuite                  protocols              pfs_keysize\r\n    1     ECDHE-RSA-AES256-GCM-SHA384  TLSv1.2                ECDH,P-256,256bits\r\n    2     ECDHE-RSA-AES256-SHA384      TLSv1.2                ECDH,P-256,256bits\r\n    3     ECDHE-RSA-AES256-SHA         TLSv1,TLSv1.1,TLSv1.2  ECDH,P-256,256bits\r\n    4     AES256-GCM-SHA384            TLSv1.2\r\n    5     AES256-SHA256                TLSv1.2\r\n    6     AES256-SHA                   TLSv1,TLSv1.1,TLSv1.2\r\n    7     ECDHE-RSA-AES128-GCM-SHA256  TLSv1.2                ECDH,P-256,256bits\r\n    8     ECDHE-RSA-AES128-SHA256      TLSv1.2                ECDH,P-256,256bits\r\n    9     ECDHE-RSA-AES128-SHA         TLSv1,TLSv1.1,TLSv1.2  ECDH,P-256,256bits\r\n    10    AES128-GCM-SHA256            TLSv1.2\r\n    11    AES128-SHA256                TLSv1.2\r\n    12    AES128-SHA                   TLSv1,TLSv1.1,TLSv1.2\r\n    13    DES-CBC3-SHA                 TLSv1,TLSv1.1,TLSv1.2\r\n    \r\n    Certificate: trusted, 2048 bit, sha256WithRSAEncryption signature\r\n    TLS ticket lifetime hint: 300\r\n    OCSP stapling: supported\r\n    Client side cipher ordering"},"comment":{"url":"https://api.github.com/repos/h2o/h2o/issues/comments/81382707","html_url":"https://github.com/h2o/h2o/issues/231#issuecomment-81382707","issue_url":"https://api.github.com/repos/h2o/h2o/issues/231","id":81382707,"user":{"login":"kazuho","id":41567,"avatar_url":"https://avatars.githubusercontent.com/u/41567?v=3","gravatar_id":"","url":"https://api.github.com/users/kazuho","html_url":"https://github.com/kazuho","followers_url":"https://api.github.com/users/kazuho/followers","following_url":"https://api.github.com/users/kazuho/following{/other_user}","gists_url":"https://api.github.com/users/kazuho/gists{/gist_id}","starred_url":"https://api.github.com/users/kazuho/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kazuho/subscriptions","organizations_url":"https://api.github.com/users/kazuho/orgs","repos_url":"https://api.github.com/users/kazuho/repos","events_url":"https://api.github.com/users/kazuho/events{/privacy}","received_events_url":"https://api.github.com/users/kazuho/received_events","type":"User","site_admin":false},"created_at":"2015-03-16T03:33:17Z","updated_at":"2015-03-16T03:33:17Z","body":"@centminmod \r\n> guess it might be Chrome issue ?\r\n\r\nIt might be, and it might be specific to Windows.\r\n\r\nFYI running H2O 1.1.1 and Chrome 41 on OSX I could not reproduce the issue.  Chrome did not report any errors as can bee seen on http://i.gyazo.com/cb4d8a37344ca66f8d368d82678ab4cf.png"}}