• Welcome to Simple Machines Community Forum. Please login or sign up.
October 17, 2021, 10:18:28 AM

News:

SMF 2.1 RC4 has been released! Try it out and help us test! :) Read more.


How do I Migrate my site to HTTPS?

Started by ApplianceJunk, August 17, 2017, 09:11:39 PM

Previous topic - Next topic

ApplianceJunk

I just received this email from Google.


Quote
Chrome will show security warnings on http://appliancejunk.com

To owner of http://appliancejunk.com,

Starting October 2017, Chrome (version 62) will show a "NOT SECURE" warning when users enter text in a form on an HTTP page, and for all HTTP pages in Incognito mode.

The following URLs on your site include text input fields (such as < input type="text" > or < input type="email" >) that will trigger the new Chrome warning.

Review these examples to see where these warnings will appear, so that you can take action to help protect users' data.

This list is not exhaustive.

http://appliancejunk.com/forums/index.php

The new warning is part of a long term plan to mark all pages served over HTTP as "not secure".


Can I simply ask my host to migrate my site to HTTPS?
Can I expect migrating to HTTPS to increase my hosting cost?


Thanks,

vbgamer45

Yeah  I have that same email kind of sucks big time have about 45 days update it all

You can do in cpanel. You buy a SSL from a provider

If you are on your own vps little tricky. You will need to be on SMF 2.0.14 at least.
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

br360

Shawnb61 put together a nice tutorial here- https://www.simplemachines.org/community/index.php?topic=555034.msg3934593#msg3934593

To get the ssl certificate, you can contact your host and see what they are offering price wise. A lot of hosts will actually do all the work for you for a fee (varies)


Shambles

My SSL certs are provided & managed via my cPanel, free of charge. See if your cPanel has that option under the SSL branch.


a10

2.0.11, going to 2.0.14 would indeed be the very 1st step (...back up everything before starting). Check the php version.

Ask your host what they can offer regarding ssl. As mentionned, some hosts provide it for free, like my host, needed just a click in control panel.

Then follow the excellent instructions from the tutorial :O)

My .htaccess for https + forcing www

RewriteEngine On
RewriteCond %{HTTPS} off [OR]
RewriteCond %{HTTP_HOST} !^www\.***\.com$ [NC]
RewriteRule ^(.*)$ https://www.***.com/$1 [L,R=301]


2.0.18, ssl, php 7.4.23, 10.3.30-MariaDB<br />Mods: Contact Page, Like Posts, Responsive Curve, Search Focus Dropdown, Add Join Date to Post.

aegersz

I use letsencrypt (https://community.letsencrypt.org/) with the getssl bash script to provide me 3 monthly free certificates but you will need some technical skills.

maybe a good as place as anywhere to start ... just saying.

my latest find for a generic .htaccesss to force https:

RewriteEngine On
# This will enable the Rewrite capabilities

RewriteCond %{HTTPS} !=on
# This checks to make sure the connection is not already HTTPS

RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R=301,L]
# This rule will redirect users from their original location, to the same location but using HTTPS.
# i.e.  http://www.example.com/foo/ to https://www.example.com/foo/
# The leading slash is made optional so that this will work either in httpd.conf
# or .htaccess context
The configuration of my Linux VPS (SMF 2.0 with 160+ mods & some assorted manual tweaks) can be found here and notes on my mods can be found here (warning: those links will take you to a drug related forum). My (House) music DJ dedication page is here

aegersz

UPDATE: I had to revert back to this more basic .htaccess to get my ssh reverse tunneling and port forwarding for apache working correctly (I am behind a no-incoming-connections-at-all firewall). This seems to be simple and effective:


RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://insert-site-name-or-IP-here/$1 [R=301,L]
The configuration of my Linux VPS (SMF 2.0 with 160+ mods & some assorted manual tweaks) can be found here and notes on my mods can be found here (warning: those links will take you to a drug related forum). My (House) music DJ dedication page is here

ApplianceJunk

CoreISP took care of this for me, thanks!

Advertisement: