Issue with 'PSP Bounce Page' to paypal

[skinnybloke]

Hi - my clients checkout and login pages have SSL enabled. If a customer chooses 'Paypal' as a payment method, the psp bounce page displays the message 'Do you want to view only the webpage content that was delivered securely'.

Looking at the html code the problem is that the Paypal button image retrieved from the Paypal server is delivered as an http and not an https file. See:

<input type="image" alt="Make payments with PayPal - it's fast, free and secure!" name="submit" src="http://images.paypal.com/images/x-click-but01.gif">

I have spoken to Actinic Support and they have told me that the problem is due to the SSL being on a different server to the website. So my initial website is:

http://www.porscheshop.co.uk/

and the SSL is:

https://clarahost.clara.net/www.pors...in/os000001.pl

So it appears I have 2 alternatives:
1. Remove SSL from the checkout and login pages
2. See if Claranet can provide a dedicated SSL certificate on the same server.

Has anyone else come across this issue? If so did you get it working without resorting to the 2 options above?

[leehack]

Have you tried putting the image on your server and referencing it securely instead of on their server? Another bum point for the sucky SSL, my word it so sucks.

[skinnybloke]

mmmmm - that's interesting. I have just looked at the code in Act_OCCPayPalTemplate.html and the link is hard coded as a 'http' link:

<input type="image" src="http://images.paypal.com/images/x-click-but01.gif" name="submit" alt="Make payments with PayPal - it's fast, free and secure!">

Surely this would not work for anyone who uses SSL in their checkout?

[leehack]

Sounds about right, with only 1 in 100 probably using SSL nowadays, if not less, i guess it's just not something that comes up too often.