Re: Please use HTTPS Reply #15 – June 05, 2017, 06:02:02 pm Quote from: emanuele – June 03, 2017, 07:53:04 amI have close to no knowledge on the matter (and I prefer not to touch the server LOL), so it's Spuds' call here. Or @TE if he comes around. BTW: I just started researching how to set up ssl on my localhost before google kills desktop notifications support for non-SSL sites... what a pain. It will always display an error for localhost
Re: Please use HTTPS Reply #16 – June 05, 2017, 06:18:51 pm If you are using a Cpanel hosting platform it is really simple. The SSL/TLS Manager will allow you to generate SSL certificates, certificate signing requests, and private keys. These are all parts of using SSL to secure your website. SSL allows you to secure pages on your site so that information such as logins, credit card numbers, etc are sent encrypted instead of plain text. It is important to secure your site’s login areas, shopping areas, and other pages where sensitive information could be sent over the web.If you will use the link, username, and password that I have provided for you below you will be able to see a real CPanel. Go to where it says SSL/TLS and click on it to see what I'm talking about.
Re: Please use HTTPS Reply #17 – June 06, 2017, 12:57:17 am @emanuele45, you can rename your localhost to any fqdn and get ssl certs for that fqdn. Other than using certbot, you can try acme.sh in obtaining and auto renewing LE ssl certs for it as well.
Re: Please use HTTPS Reply #18 – June 06, 2017, 01:11:15 am I'm far before this step, I just managed to understand how to have the server respond when I point the browser to https. xD
Re: Please use HTTPS Reply #19 – June 07, 2017, 12:44:41 am Quote from: ahrasis – June 06, 2017, 12:57:17 am@emanuele45, you can rename your localhost to any fqdn and get ssl certs for that fqdn. Other than using certbot, you can try acme.sh in obtaining and auto renewing LE ssl certs for it as well.I haven't done this, but would you still get a certificate error?
Re: Please use HTTPS Reply #20 – June 07, 2017, 03:21:44 am You shouldn't gel ssl error in your browser if LE certs can be issued and then properly installed for the localhost site.
Re: Please use HTTPS Reply #21 – June 07, 2017, 08:40:53 am Joshua Dickerson, you could get an error if the certificate is bad. I have bought then and they were bad, of course, they were replaced by the co. I bought then from. it's just a pain when you get a bad certificate. It doesn't happen that often.
Re: Please use HTTPS Reply #22 – October 25, 2017, 06:40:09 pm I see HTTPS now but you can still visit non https:// http://www.elkarte.net/ shouldn't that be redirected to the https version?Also I see HTTP/2.0 not supported and site is still using PHP 5.4
Re: Please use HTTPS Reply #23 – October 25, 2017, 08:47:28 pm You may run into a problem with some anti-virus software showing an error if someone tries to visit your website. Not having one can end up doing you more harm than good and if you are selling products through your website you could be held liable for not protecting your client's info. They are cheap around $5.50/year. I use them to protect my clients and I own info. My site that I started here has one https://realchristchurch.com. I use this site to test my SSL's with https://www.sslshopper.com/ssl-checker.html#hostname=www.realchristchurch.com
Re: Please use HTTPS Reply #24 – October 25, 2017, 09:11:49 pm Quote from: vbgamer45 – October 25, 2017, 06:40:09 pmI see HTTPS now but you can still visit non https:// http://www.elkarte.net/ shouldn't that be redirected to the https version?Also I see HTTP/2.0 not supported and site is still using PHP 5.4While "rolling" https out we chose to not to enable redirect, just in case we had to back things out.I don't think the current version of nginx on the site supports http/2. PHP could be updated nods
Re: Please use HTTPS Reply #25 – October 25, 2017, 10:43:22 pm Very true about the PHP. I can change the PHP for my Clients from 5.4 - 7.1
Re: Please use HTTPS Reply #26 – October 28, 2017, 05:42:52 am Quote from: vbgamer45 – October 25, 2017, 06:40:09 pmI see HTTPS now but you can still visit non https:// http://www.elkarte.net/ shouldn't that be redirected to the https version?Also I see HTTP/2.0 not supported and site is still using PHP 5.4Oh, is that why I've been seeing some weird logged in/not logged in stuff? I didn't bother investigating, thinking it was probably some cache fluke on my end.
Re: Please use HTTPS Reply #27 – October 28, 2017, 07:03:33 am redirect has been enabled Should be fixed within the next few minutes ...
Re: Please use HTTPS Reply #28 – October 31, 2017, 12:36:54 am I noted one page is not fully secure as IchBin avatar url is on non https in here.
Re: Please use HTTPS Reply #29 – October 31, 2017, 07:03:12 am emanuele bans @IchBin for not using a safe avatar! xD