• Welcome to Simple Machines Community Forum. Please login or sign up.

Converting to https, step-by-step...

Started by shawnb61, July 08, 2017, 03:01:04 AM

Previous topic - Next topic

Matthew-me

Quote from: aegersz on August 22, 2017, 04:36:59 PM
I will upgrade too as prior to 0.14, any linked images that are not https will disable SSL for that particular page - is that correct ?

2.014 includes a port from the Beta 2.1 of the image proxy option and https for Avatars.

Quote from: Colin on May 14, 2017, 05:16:14 PM
Simple Machines Forum has released a new patch to the 2.0.x line, bringing our latest release version to 2.0.14.
...
The quick summary of changes is as follows:

       
  • Added PHP 7 support.
  • Ported image proxy support from SMF 2.1.
  • Also added HTTPS for avatars.
  • Accept email addresses with long TLDs.
  • See the changelog for more.

Without upgrading pages will still load over SSL but you won't see the green padlock if there is mixed content, or you may get a warning or refusal to load - depending on browser and configuration. Upgrading to 2.014 would be my personal recommendation. Having just done a fresh install on a new server, everything is working great with SSL across the whole site.

Kindly,

M
How will you make the world a better place today?

vbgamer45

I would also recommend http2 with apache. Easy to setup on apache 2.4
You get a nice speed boost for ssl sites
httpd.conf file
add
LoadModule http2_module modules/mod_http2.so


And in each virtual host that has SSL
Protocols h2 http/1.1
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

aegersz

I just moved to 2.0.14 and am very happy. everything is working well. image proxy is a cool thing.
The configuration of my Linux VPS (SMF 2.0 with 160+ mods & some assorted manual tweaks) can be found here and notes on my mods can be found here (warning: those links will take you to a drug related forum). My (House) music DJ dedication page is here

seosefi

I've spent like 10 days to convert to https, it's really hard to switch. Thank you for completing the process by looking at the makalen. It's been good to fix it. For those who want to switch to https, there will also be a small recommendation, the webmaster search console needs to set the property as https, and the robots.txt file needs to be modified as https in the site map path.

Kindred

Sorry, but that last post made no sens at all....
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

shawnb61

I believe seosefi is saying that if we use them, we may need to also update our URLs in Google Webmaster Tools and Bing Webmaster Tools (for Bing & Yahoo) 

Also that if you have a SITEMAP: specified in your robots.txt, don't forget that, too. 

These make sense to me.   Easy to forget that stuff. 

I think the makalen reference is a typo(???).  The only connection my brain made was to Macallen scotch, which I agree is a critical part of successfully completing the process. 
Address the process rather than the outcome.  Then, the outcome becomes more likely.   - Fripp

peterinwa

All my websites have been working fine after being converted with a .htaccess file, all showing the lock and secure. Until today.

Now they all work fine except for my forum which is in the folder /forums in my /public_html directory. It is showing NOT SECURE in multiple browsers.

What I don't understand is how it is possible that all my other websites, whose index.html files are found in other folders in my /public_html directory, are running fine and secure.

Any ideas what might be causing this?

Thank you,

Peter
Here's my forum:  www.MySchnauzer.net/forums

青山 素子

Is it specifically loading over http? If it's using https, you probably have an issue with mixed mode content. You can put a URL in the form over at https://www.whynopadlock.com/ and it will tell you what's loading insecurely.
Motoko-chan
Director, Simple Machines

Note: Unless otherwise stated, my posts are not representative of any official position or opinion of Simple Machines.


peterinwa

I used the link and all my other sites test fine, except for some insecure links to other websites. There are a good number in the forum. Could they cause the NOT SECURE issue?

They look like this:

Total number of items: 71
Number of insecure items: 5
Insecure URL: http://i990.photobucket.com/albums/af29/liz-wills/91daa7b807d8f9a426656dd94b924b9c_zpsff5vopcw.jpg
Found in: https://www.myschnauzer.net/forums/index.php?PHPSESSID=ho5bpq6s5cjpq17o22pl6la613;wwwRedirect

The forum test gave me:

SSL verification issue (Possibly mis-matched URL or bad intermediate cert.). Details:
ERROR: no certificate subject alternative name matches

This means nothing to me. I also don't know why it happens in the SMF folder and not the others. They would all operate under the same SSL.

Thank you very much!
Here's my forum:  www.MySchnauzer.net/forums

Kindred

Not really Anything you can do about those
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

peterinwa

Do you think those items are causing the forum to show not secure? Would they cause this?

SSL verification issue (Possibly mis-matched URL or bad intermediate cert.). Details:
ERROR: no certificate subject alternative name matches

I think maybe this started today because the browsers just started checking for secure sites?
Here's my forum:  www.MySchnauzer.net/forums

Kindred

1- they will cause mixed content...   turning on the proxy in the forum settings will help, but may not fix. Broken photobucket links

2- no, that error is something else. Talk to your host

3- actually most browsers did this a few months ago
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

peterinwa

Here's my forum:  www.MySchnauzer.net/forums

Sacha

October 11, 2017, 08:31:42 AM #33 Last Edit: October 11, 2017, 08:43:46 AM by Sacha
If i have Rewrite enabled in .htacces, some users receive the following error. I had to disable it in .htaccess file:



Quote
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]


# Errors!
ErrorDocument 400 //index.php?action=httperror;c=400
ErrorDocument 401 //index.php?action=httperror;c=401
ErrorDocument 402 //index.php?action=httperror;c=402
ErrorDocument 403 //index.php?action=httperror;c=403
ErrorDocument 404 //index.php?action=httperror;c=404
ErrorDocument 405 //index.php?action=httperror;c=405
ErrorDocument 406 //index.php?action=httperror;c=406
ErrorDocument 407 //index.php?action=httperror;c=407
ErrorDocument 408 //index.php?action=httperror;c=408
ErrorDocument 409 //index.php?action=httperror;c=409
ErrorDocument 410 //index.php?action=httperror;c=410
ErrorDocument 411 //index.php?action=httperror;c=411
ErrorDocument 412 //index.php?action=httperror;c=412
ErrorDocument 413 //index.php?action=httperror;c=413
ErrorDocument 414 //index.php?action=httperror;c=414
ErrorDocument 415 //index.php?action=httperror;c=415
ErrorDocument 416 //index.php?action=httperror;c=416
ErrorDocument 417 //index.php?action=httperror;c=417
ErrorDocument 500 //index.php?action=httperror;c=500
ErrorDocument 501 //index.php?action=httperror;c=501
ErrorDocument 502 //index.php?action=httperror;c=502
ErrorDocument 503 //index.php?action=httperror;c=503
ErrorDocument 504 //index.php?action=httperror;c=504
ErrorDocument 505 //index.php?action=httperror;c=505

I think the problem is "RewriteEngine On" because i deleted lines of https and .htaccess was like this and the continued:

Quote
RewriteEngine On

# Errors!
ErrorDocument 400 //index.php?action=httperror;c=400
ErrorDocument 401 //index.php?action=httperror;c=401
ErrorDocument 402 //index.php?action=httperror;c=402
ErrorDocument 403 //index.php?action=httperror;c=403
ErrorDocument 404 //index.php?action=httperror;c=404
ErrorDocument 405 //index.php?action=httperror;c=405
ErrorDocument 406 //index.php?action=httperror;c=406
ErrorDocument 407 //index.php?action=httperror;c=407
ErrorDocument 408 //index.php?action=httperror;c=408
ErrorDocument 409 //index.php?action=httperror;c=409
ErrorDocument 410 //index.php?action=httperror;c=410
ErrorDocument 411 //index.php?action=httperror;c=411
ErrorDocument 412 //index.php?action=httperror;c=412
ErrorDocument 413 //index.php?action=httperror;c=413
ErrorDocument 414 //index.php?action=httperror;c=414
ErrorDocument 415 //index.php?action=httperror;c=415
ErrorDocument 416 //index.php?action=httperror;c=416
ErrorDocument 417 //index.php?action=httperror;c=417
ErrorDocument 500 //index.php?action=httperror;c=500
ErrorDocument 501 //index.php?action=httperror;c=501
ErrorDocument 502 //index.php?action=httperror;c=502
ErrorDocument 503 //index.php?action=httperror;c=503
ErrorDocument 504 //index.php?action=httperror;c=504
ErrorDocument 505 //index.php?action=httperror;c=505

Then i deleted "RewriteEngine On" and worked fine:

Quote
# Errors!
ErrorDocument 400 //index.php?action=httperror;c=400
ErrorDocument 401 //index.php?action=httperror;c=401
ErrorDocument 402 //index.php?action=httperror;c=402
ErrorDocument 403 //index.php?action=httperror;c=403
ErrorDocument 404 //index.php?action=httperror;c=404
ErrorDocument 405 //index.php?action=httperror;c=405
ErrorDocument 406 //index.php?action=httperror;c=406
ErrorDocument 407 //index.php?action=httperror;c=407
ErrorDocument 408 //index.php?action=httperror;c=408
ErrorDocument 409 //index.php?action=httperror;c=409
ErrorDocument 410 //index.php?action=httperror;c=410
ErrorDocument 411 //index.php?action=httperror;c=411
ErrorDocument 412 //index.php?action=httperror;c=412
ErrorDocument 413 //index.php?action=httperror;c=413
ErrorDocument 414 //index.php?action=httperror;c=414
ErrorDocument 415 //index.php?action=httperror;c=415
ErrorDocument 416 //index.php?action=httperror;c=416
ErrorDocument 417 //index.php?action=httperror;c=417
ErrorDocument 500 //index.php?action=httperror;c=500
ErrorDocument 501 //index.php?action=httperror;c=501
ErrorDocument 502 //index.php?action=httperror;c=502
ErrorDocument 503 //index.php?action=httperror;c=503
ErrorDocument 504 //index.php?action=httperror;c=504
ErrorDocument 505 //index.php?action=httperror;c=505

humbleworld

my forum, by default, has no www, and it is installed on a subdomain.

i tried this .htaccess file before but it was in conflict with prettyURL mod. How to fix it?

shawnb61

I think you're going to need to ask a few questions in the Pretty URLs support thread for a problem specific to that mod.   I see you asked once - be persistent.
Address the process rather than the outcome.  Then, the outcome becomes more likely.   - Fripp

Somegras

Followed this guide, https:// works but Google indicates that it is still not fully function (the green lock with info). How can I fix this?




lurkalot

Quote from: Somegras on December 29, 2017, 02:34:26 PM
Followed this guide, https:// works but Google indicates that it is still not fully function (the green lock with info). How can I fix this?



The address for your logo image at the bottom of the page

http://xsfserver.com/footerlogo.png

Change to

https://xsfserver.com/footerlogo.png

Somegras

Quote from: lurkalot on December 29, 2017, 02:54:16 PM
Quote from: Somegras on December 29, 2017, 02:34:26 PM
Followed this guide, https:// works but Google indicates that it is still not fully function (the green lock with info). How can I fix this?



The address for your logo image at the bottom of the page

hxxp:xsfserver.com/footerlogo.png [nonactive]

Change to

hxxp:xsfserver.com/footerlogo.png [nonactive]

Done, seems to have fixed everything for guests at the board index, however, when I am being logged in, it isn't functioning at the board index. If I go deeper in posts it sometimes works and sometimes doesn't.

mrsfalcon

Thanks for this! Switched to https a while back but just forced it this am along with some other upgrades to improve safety and performance. I had some unhappy users but fixed the problem quickly with your instructions!

Advertisement: