# Not valid SSL certificate WP discourse

**URL:** https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486
**Category:** WordPress
**Created:** [December 20, 2017, 2:57pm UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486 "2017-12-20T14:57:47Z")
**Posts on this page:** 11
**Page:** 1

<div class="post-metadata">

### Author: ![Jeroen\_Van\_Der\_Mark](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jeroen_van_der_mark/32/81687_2.png) [@Jeroen\_Van\_Der\_Mark](https://meta.discourse.org/u/Jeroen_Van_Der_Mark)
#### Post date: [December 20, 2017, 2:57pm UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486/1 "2017-12-20T14:57:47Z")

</div>

Hi! We are running the [WP discourse](https://github.com/discourse/wp-discourse) plugin. Great integration btw! Thanks for that.

One small problem pops up: it loads the profile picture as http instead of https. (see: [FIT.nl - Alles over krachttraining, voeding en leefstijl](https://www.fit.nl/kijkje-keuken/tom-wanders))  
This leads to an incorrect SSL-certificate. Is there a known fix for this?

Thanks in advance 💙

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [December 20, 2017, 2:59pm UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486/2 "2017-12-20T14:59:58Z")

</div>

Are both sites https? Is force https enabled on the discourse side?

---

<div class="post-metadata">

### Author: ![Jeroen\_Van\_Der\_Mark](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jeroen_van_der_mark/32/81687_2.png) [@Jeroen\_Van\_Der\_Mark](https://meta.discourse.org/u/Jeroen_Van_Der_Mark)
#### Post date: [December 20, 2017, 5:38pm UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486/3 "2017-12-20T17:38:05Z")

</div>

Ah perfect, thanks for your answer! I forced it now in https (option was off). Still a http result, maybe cache?

Both sides are https 🙂

[https://forum.fit.nl](https://forum.fit.nl) & [FIT.nl - Alles over krachttraining, voeding en leefstijl](https://www.fit.nl/kijkje-keuken/tom-wanders)

---

<div class="post-metadata">

### Author: ![simon](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/simon/32/339122_2.png) [@simon](https://meta.discourse.org/u/simon)
#### Post date: [December 20, 2017, 5:59pm UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486/4 "2017-12-20T17:59:58Z")

</div>

Do you have the https URL set in the Discourse URL option on WordPress? It is used for converting any relative URLs that are returned from Discourse to Absolute URLs.

---

<div class="post-metadata">

### Author: ![Jeroen\_Van\_Der\_Mark](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jeroen_van_der_mark/32/81687_2.png) [@Jeroen\_Van\_Der\_Mark](https://meta.discourse.org/u/Jeroen_Van_Der_Mark)
#### Post date: [December 20, 2017, 6:06pm UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486/5 "2017-12-20T18:06:28Z")

</div>

Thanks Simon! Yes i have the |Discourse URL| → [https://forum.fit.nl](https://forum.fit.nl)

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [December 20, 2017, 6:08pm UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486/6 "2017-12-20T18:08:04Z")

</div>

I checked and when I look at an avatar on the WP side, I get an https link to the discourse avatar.

---

<div class="post-metadata">

### Author: ![Jeroen\_Van\_Der\_Mark](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jeroen_van_der_mark/32/81687_2.png) [@Jeroen\_Van\_Der\_Mark](https://meta.discourse.org/u/Jeroen_Van_Der_Mark)
#### Post date: [December 20, 2017, 6:10pm UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486/7 "2017-12-20T18:10:10Z")

</div>

That’s correct 🙂  
But the image is still http source instead of https.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [December 20, 2017, 6:15pm UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486/8 "2017-12-20T18:15:47Z")

</div>

Oh. You’re right. I swear that I’d seen an avatar/profile image as https, but now I’m seeing http.

---

<div class="post-metadata">

### Author: ![simon](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/simon/32/339122_2.png) [@simon](https://meta.discourse.org/u/simon)
#### Post date: [December 20, 2017, 7:45pm UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486/9 "2017-12-20T19:45:49Z")

</div>

The `src` attribute for the avatars is set by the data that’s returned by Discourse. If you have setup a webhook for syncing comments between Discourse and WordPress, you will be getting comment data that has been cached on WordPress until a new comment is added to a topic. Hopefully that’s the problem. Let us know if this doesn’t get resolved.

---

<div class="post-metadata">

### Author: ![Jeroen\_Van\_Der\_Mark](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jeroen_van_der_mark/32/81687_2.png) [@Jeroen\_Van\_Der\_Mark](https://meta.discourse.org/u/Jeroen_Van_Der_Mark)
#### Post date: [December 21, 2017, 5:48am UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486/10 "2017-12-21T05:48:48Z")

</div>

It works 🙂

Thanks @simon & @pfaffman for the great help 💙

---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [June 8, 2024, 12:43pm UTC](https://meta.discourse.org/t/not-valid-ssl-certificate-wp-discourse/76486/11 "2024-06-08T12:43:45Z")

</div>

This topic was automatically closed after 2361 days. New replies are no longer allowed.
