<p>This is a bit of a stab in the dark, but have you tried forcing SSL for all CP requests?</p>

<p><a href="http://buildwithcraft.com/help/force-ssl" rel="nofollow">http://buildwithcraft.com/help/force-ssl</a></p>

<p>Ultimately your .htaccess would look something like this:</p>

<pre><code>&lt;IfModule mod_rewrite.c&gt;
 RewriteEngine On

 # Force SSL for CP requests
 RewriteCond %{HTTP_HOST} example\.com [NC]
 RewriteCond %{REQUEST_URI} ^/admin/ [NC]
 RewriteCond %{HTTPS} !=on
 RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [NC,R=301,L]
&lt;/IfModule&gt;
</code></pre>

CC BY-SA 3.0
2015-05-25T14:27:04.973Z
Thanks Alec, this didn't work for us. It transpires is a Firefox only issue. I've seen similar things with IE and Firefox with font file locations. A while ago now, so can't recall exactly what the issue is, but other browsers are fine with https on and the dashboard.
Pathfinder
CC BY-SA 3.0
2015-05-27T15:06:49.240Z
ahh I see, have you managed to find a solution?
Alec Ritson
CC BY-SA 3.0
2015-06-02T15:43:45.303Z
Hi Alec, sorry for the delay in replying. We haven't switch the HTTPS on yet - certs are fun! But the solution will be to use a non firefox browser. I've come across the issue myself when coding, if memory serves it is something to do with the CSS and the paths to the fonts and the way Firefox likes them to be linked. Relative vs. actual paths etc. I'm not sure, it is a long time since I ran into the issue myself when coding. If it happens when the HTTPS is enabled, I'll post again.
Pathfinder
CC BY-SA 3.0
2015-05-22T21:15:51.417Z
2015-05-22T21:15:51.417Z
Alec Ritson
<p>We are enabling SSL initially via cloudflare and their free flexible SSL. This works great for the site content, but on the dashboard for craft, if I login, any icons are converted into words.</p>

<p><a href="https://www.cloudflare.com/ssl" rel="nofollow">https://www.cloudflare.com/ssl</a></p>

<p>I am seeing that the page is serving mixed secure content, but wonder if there is a way to make craft happy with this situation and render the font icon properly?</p>

<p>We will eventually implement a full SSL cert, but this will be in place for a while.</p>

<p>Many thanks :)</p>

<cp-dashboard>
Dashboard icons missing with flexible SSL
# Dashboard icons missing with flexible SSL

(Asked by: username_0 on 2015-05-22)

We are enabling SSL initially via cloudflare and their free flexible SSL. This works great for the site content, but on the dashboard for craft, if I login, any icons are converted into words.

<https://www.cloudflare.com/ssl>

I am seeing that the page is serving mixed secure content, but wonder if there is a way to make craft happy with this situation and render the font icon properly?

We will eventually implement a full SSL cert, but this will be in place for a while.

Many thanks :)

**Tags:** cp-dashboard


---

## 1 answers

### Answer by username_1 on 2015-05-22. Score: 3

This is a bit of a stab in the dark, but have you tried forcing SSL for all CP requests?
http://buildwithcraft.com/help/force-ssl
Ultimately your .htaccess would look something like this:

 RewriteEngine On

 # Force SSL for CP requests
 RewriteCond %{HTTP_HOST} example\.com [NC]
 RewriteCond %{REQUEST_URI} ^/admin/ [NC]
 RewriteCond %{HTTPS} !=on
 RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [NC,R=301,L]

> **Comments:**
> **username_0**: Thanks Alec, this didn't work for us. It transpires is a Firefox only issue. I've seen similar things with IE and Firefox with font file locations. A while ago now, so can't recall exactly what the issue is, but other browsers are fine with https on and the dashboard.  
> **username_1**: ahh I see, have you managed to find a solution?  
> **username_0**: Hi Alec, sorry for the delay in replying. We haven't switch the HTTPS on yet - certs are fun! But the solution will be to use a non firefox browser. I've come across the issue myself when coding, if memory serves it is something to do with the CSS and the paths to the fonts and the way Firefox likes them to be linked. Relative vs. actual paths etc. I'm not sure, it is a long time since I ran into the issue myself when coding. If it happens when the HTTPS is enabled, I'll post again.  

---

