Https Issues - BaseURL Issue - Hugo - Third Party Hosting

I have created website using the hugo-universal-theme.

I have edited the website and works fine on localhost and http website.

I have installed an SSL (DigiCert Inc) cert onto third party webhosting platform.

Since trying to move to https I am getting loading issues. It looks like css issues.

Top Picture is http and below is https:

image

When I run WhyNoPadlock I get errors like:

Main Possible Error:
Force HTTPS
Your webserver is not forcing the use of SSL.You may want to add a redirect to ensure a secure connection is used.

Hard Failure
A style-sheet with an insecure url of “http://example.co.uk/css/style.default.css” was loaded on line: 37 of https://www.example.co.uk/.
This URL will need to be updated to use a secure URL for your padlock to return.

There are more like this with images and other css but not too many.

I have edited the config.toml file baseurl code below I might be doing this wrong?

Code:
baseurl = “https://www.example.co.uk/

Review same area theme code here.

If anyone can explain what I am doing wrong regarding https or point me in the right direction that would be great.

While writing this I have just throught of a test download the theme again make no changes (except the base URL) and upload it to the webserver and see if I get the same issue.

I will report back what I find.

Thanks for taking the time to read my post.

Kind Regards,
Paulser

Perhaps add https: to the font awesome and bootstrap lines https://github.com/devcows/hugo-universal-theme/blob/master/layouts/partials/head.html#L26-L27

As far as the error on your /css/style.default.css, perhaps you are serving it from an insecure URL also? It’s hard to tell without more details on your site/server.

Thanks for the additional information.

I will run my test and also review some additional changes you recommeneded and update this post.

This site trying to be loaded in BT Webhosting (UK Company).

I review it in more detail and see if I can add any additional information.

Will update this post if I succeed or not.

Kind Regards,
Paulser

@paulser
I would suggest that you open an issue in the Universal theme’s GitHub repo because the protocol relative URLs are an anti-pattern.

The links in the Universal theme’s head partial: load the insecure http addresses even though the stylesheets are also available under https

If you do open an issue feel free to quote me. I’m one of the people who maintain the Hugo Themes repository.

cc: @digitalcraftsman

Actually we just put a note in the README of the Hugo Themes repo to discourage the use of protocol relative URLs in themes with this commit:

Hot topic this thanks for all the info :slight_smile: I am in the pub so sorry for not doing test and reviewing this with more detail.

I have a look what you provided and post updates tomorrow. Thanks again for everything your provided

Merry Christmas everyone

Enjoy your beers :wink:

1 Like

I have done some additional research and I the theme works fine and my website/code works fine.

The issue was the webhosting as it not my normal hosting platform.

We had problems with certs and BT staff memeber resolved the issue but looks like he also tried to move stuff himself this what caused my issues.

Basically this just me being stupid and missing simple process on the webhosting platform.

Thanks you everyone for taking the time in researching this.

You did help me review this in different way that made me figure out the problem.

Hope everyone has amazing Christmas.

Issue is resolved