https but no padlock

[scatcat]

Hi,

I have been running a site based on frames, so any secure parts of the site where not showing the 'padlock'. I have now changed this so that the site is based on CSS with no frames.

Now when ever I use a [site.com...] link on mysite
I would expect it to show a padlock. It doesn't?

On any page that is supposed to be secure the properties for IE says that the page is being encrypted.

Mozilla based browsers say they are not encrypted.

And in all cases the padlock does not appear. I am perplexed.

I host the site myself using Apache with a Verisign certificate installed.

Can anyone shed some light on this please?

[jweighell]

Is the page accessing images using a non-secure http:// address? If so, this would cause the padlock not to appear.

You'll need to copy these onto your secure server.

[scatcat]

Thanks jweighell, I did check that and that is ok.

After much hair pulling I have found the answer.

The site starts with redirection from a html page onto a dynamic page driven by netdata macros (IBM stuff assocated with Websphere 4.1).

The html page used a NOFRAMES redirection, that would allow people who where not using frames, a chance to see something of the site. ie

<FRAMESET ROWS=100% , * .......
<FRAME NAME=top SRC="http://www.my.....
etc

As a consequence the 'new css' site was still being treated as a framed site, 1 big frame. (At least that is the only thing I can think that would explain it, does anyone else know otherwise?)

After much hunting around I realised this, changed the html page to striaght javascript redirection and it is now working.....phew!

That's what happens when you change a site that has been working one way for the last 3 years, you forget how it works! or doesn't ;-)

Thanks again.