Advertisement:

Author Topic: Converting to https, step-by-step...  (Read 30831 times)

Offline Obsydian

  • Semi-Newbie
  • *
  • Posts: 12
Re: Converting to https, step-by-step...
« Reply #40 on: February 05, 2018, 10:44:54 AM »
My forum at https://www.thetarotforum.com/ [nofollow] is showing up as not-secure.  The test website shows: You currently have TLSv1 enabled.
This version of TLS is being phased out. This warning won't break your padlock, however if you run an eCommerce site, PCI requirements state that TLSv1 must be disabled by June 30, 2018.

That is the only issue on that page, and it says it won't break the padlock, but I'm not sure what else is broken?

EDIT: I closed the tab and reopened it and everything is secure and working fine.  Keeping this with solution in case somebody else needs it. :)
« Last Edit: February 05, 2018, 11:04:21 AM by Obsydian »

Online Nomada_Firefox

  • Semi-Newbie
  • *
  • Posts: 54
Re: Converting to https, step-by-step...
« Reply #41 on: February 12, 2018, 06:47:03 AM »
Hi. I do not know but my forum 2.0.15 + Tiny portal 1.3 loads the https as secure running administration and perhaps other parts but when I run the forum or the main page, it shows the https but it says how the site is not fully secured.

It looks as if my server was correct. https://www.sslshopper.com/ssl-checker.html#hostname=https://firefoxccmods.com

Any idea about why does it happen?

Offline lurkalot

  • Sophist Member
  • *****
  • Posts: 1,069
  • Gender: Male
  • Tinyportal Support
    • guitaristguild on Facebook
    • Tinyportal on GitHub
    • @GuitaristGuild on Twitter
    • Guitarist Guild
Re: Converting to https, step-by-step...
« Reply #42 on: February 13, 2018, 02:27:05 PM »
Hi. I do not know but my forum 2.0.15 + Tiny portal 1.3 loads the https as secure running administration and perhaps other parts but when I run the forum or the main page, it shows the https but it says how the site is not fully secured.

It looks as if my server was correct. https://www.sslshopper.com/ssl-checker.html#hostname=https://firefoxccmods.com

Any idea about why does it happen?

Hard to tell when you can't see the home page or forum as guest.

Offline helpplease

  • Semi-Newbie
  • *
  • Posts: 24
Re: Converting to https, step-by-step...
« Reply #43 on: February 13, 2018, 09:09:09 PM »
Hi all  :)


I have also need so long time to get https half way working, but still need help.

Themes/Reseller/images/expand.gif caused mixed-content and the https SSL-Icon is not green. Yes, only because this small gif is loaded.

The source code show: srcCollapsed: smf_images_url + '/expand.gif',
Have try to delete this from the BoardIndex.template.php "srcCollapsed: smf_images_url + '/expand.gif'," but than the index-page, forum is down.

So, how can I get rid of this?  :(

Any help would be greatly appreciated..


Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 56,112
  • Gender: Male
    • Kindred-999 on GitHub
Re: Converting to https, step-by-step...
« Reply #44 on: February 13, 2018, 09:15:58 PM »
Theme specific issues should be addressed in the thread dedicated to supporting that theme.
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline helpplease

  • Semi-Newbie
  • *
  • Posts: 24
Re: Converting to https, step-by-step...
« Reply #45 on: February 13, 2018, 10:03:01 PM »
Hello Kindred, thank you for your response.

The Reseller is based on the default template from smf Forum  :)
The same code is on this website: simplemachines.org/index.php
aSwapImages: [
            {
               sId: 'upshrink_ic',
               srcExpanded: smf_images_url + '/collapse.gif',
               altExpanded: 'Shrink or expand the header.',
               srcCollapsed: smf_images_url + '/expand.gif',
               altCollapsed: 'Shrink or expand the header.'
            }
         ],
         oThemeOptions: {


Just need to know the path to change it to https. I didn’t find it :(
Somewhere in the code for SMF it tell the script to take the /expand.gif, but where is it?
The developer of SMF know for sure where the string is located..
« Last Edit: February 13, 2018, 10:21:47 PM by helpplease »

Offline Illori

  • Project Manager
  • SMF Master
  • *
  • Posts: 49,129
Re: Converting to https, step-by-step...
« Reply #46 on: February 14, 2018, 05:09:24 AM »
if you reset all theme URLs to be https it should be converted automatically. if you did that already and still have this issue you need to post in themes support topic.

Offline helpplease

  • Semi-Newbie
  • *
  • Posts: 24
Re: Converting to https, step-by-step...
« Reply #47 on: February 14, 2018, 07:10:50 AM »
This hasen't been converted automatically.

However, I don't want to "spam" the forum here with this question but I still need help.

Offline helpplease

  • Semi-Newbie
  • *
  • Posts: 24
Re: Converting to https, step-by-step...
« Reply #48 on: February 14, 2018, 08:34:25 AM »
Your webserver is forcing the use of SSL.

Your SSL Certificate is installed correctly.


Mixed Content - Errors:

An image with an insecure url of "http://.........../expand.gif" was loaded on line: 749.
This URL will need to be updated to use a secure URL for your padlock to return.

Offline Illori

  • Project Manager
  • SMF Master
  • *
  • Posts: 49,129
Re: Converting to https, step-by-step...
« Reply #49 on: February 14, 2018, 08:37:59 AM »
i understand that is your issue, as has been stated already in this topic you need to post in the themes support topic for further assistance.

Offline helpplease

  • Semi-Newbie
  • *
  • Posts: 24
Re: Converting to https, step-by-step...
« Reply #50 on: February 14, 2018, 09:07:16 AM »
I need a general themes support, the same error comes when I change to the default SMF themes.

And where is it please?

Offline Vincenz0

  • Newbie
  • *
  • Posts: 7
Re: Converting to https, step-by-step...
« Reply #51 on: March 14, 2018, 05:36:07 AM »
Hey guys!

I wish to leave another tip of information.

After switching to https, naturally many things stopped to work especially images (mixed content.. ;) )

The image proxy SMF provided was not working for me, and returning error 500, but nothing in php logs and I had no clue what was wrong, I checked everything, turned on apache2 logging for all errors, even turned on display errors but no still nothing to see..

Turns out in the proxy.php file errors get disabled..... :D
Code: [Select]
                // Turn off all error reporting; any extra junk makes for an invalid image.
                error_reporting(0);

After commenting out that line I found out the simple problem and if others have it, I recommend this fix.

Turns out it uses the CURL apache module.. which is not standard installed on apache2.

Simple fix:
Code: [Select]
sudo apt-get install php-curl
Hope it helps someone with image proxy problems.


Also the redirect was not working, not in apache2 config files or in .htaccess.. turns out in the new apache it is not recommended to make a rewrite for redirects.

instead do the folowing:
In your /etc/apache2/sites-enabled/
Modify your site config something like this:
Code: [Select]
<VirtualHost *:80>
    ServerName www.yourforumsite.com
    Redirect permanent "/" "https://www.yourforumsite.com/"
</VirtualHost>

<VirtualHost *:443>
    ServerName www.yourforumsite.com
    # ... SSL configuration goes here
</VirtualHost>
This is always working and more safe than any rewrites.


Because of my rewrite problems I was already manually updating http to https a simple trick to update all old URL's for your site people posted or used in signatures:

Code: [Select]
UPDATE smf_messages
     set body = REPLACE(body, 'http://www.yourforumsite.com', 'https://www.yourforumsite.com')
     WHERE body like '%http://www.yourforumsite.com%';

UPDATE smf_members
     set signature = REPLACE(signature, 'http://www.yourforumsite.com', 'https://www.yourforumsite.com')
     WHERE signature like '%http://www.yourforumsite.com%';

This can also be used to update for instance images posted with hxxp:i.imgurl [nonactive] to https.
And thus avoid caching images on your server when not needed. Most image hosts support https nowadays (some exceptions like tinypic)
« Last Edit: March 14, 2018, 05:49:28 AM by Vincenz0 »

Offline MadCityKaren

  • Semi-Newbie
  • *
  • Posts: 13
  • Gender: Female
Re: Converting to https, step-by-step...
« Reply #52 on: May 20, 2018, 02:45:16 PM »
Thanks for this step-by-step list, shawnb61! 

I'd realized my forum/website was having an issue of some sort with SSL after receiving some feedback from a member, but found the problem wasn't so much not having the certificate (SSL checker showed all was well), but that the .htaccess file in order to redirect is somehow missing ... (trusting that will indeed solve the issue; I'm asking the webhost to deal with it -- it's not as though I'd removed the file; they should be apprised of such things to maintain the integrity of all they serve.)