I just installed SSL on one of my sites. While it's working well on the main site, it's not on the wordpress blog here. I have added this snippet in .htaccess of the blog:

RewriteCond %{HTTPS} !=on

RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

But it's still not fully secure with some assets not in secure mode. I used Httpfox to check all the HTTP requests and all HTTP requests are correctly redirected to HTTPS. Now I don't know why it's still not fully secure. I thought redirecting all HTTP assets to HTTPS would be the deal in this case? Is it?

If not, it seems the only option left for me is to manually change all HTTP assets (href, src, etc.) to HTTPS across all the content. Is there any easy way to achieve this for the entire WP blog? A plugin? This doesn't seem right to me as I'm afraid it would neglect one asset or two on some of the posts or pages.

This really sucks.....any help would be appreciated!

Yep.. looks like you need to change the links for all your uploaded images to https:// (and the favicon link)

 

I *think* there maybe a plugin for WordPress that does this already so it would be worth having a look before you go through ever single page.

 

If you know what your doing with mysql you could dump the database out, make the changes using search and replace, then re-upload it again.

First, you can force SSL in wp_config.php using

define( 'FORCE_SSL_ADMIN', true );

If you continue to get errors they are most like likely coming from media attachments where images were included via the editor pre SSL.

I wrote about it here:

http://www.kirstencassidy.com/force-ssl-for-wordpress-media-attachments/

Edited May 22, 201511 yr by mantis