Advertisement:

Author Topic: How do I Migrate my site to HTTPS?  (Read 1041 times)

Offline ApplianceJunk

  • SMF Hero
  • ******
  • Posts: 3,483
    • ApplianceJunk.com
How do I Migrate my site to HTTPS?
« on: August 17, 2017, 09:11:39 PM »
I just received this email from Google.


Quote
Chrome will show security warnings on http://appliancejunk.com

To owner of http://appliancejunk.com,

Starting October 2017, Chrome (version 62) will show a “NOT SECURE” warning when users enter text in a form on an HTTP page, and for all HTTP pages in Incognito mode.

The following URLs on your site include text input fields (such as < input type="text" > or < input type="email" >) that will trigger the new Chrome warning.

Review these examples to see where these warnings will appear, so that you can take action to help protect users’ data.

This list is not exhaustive.

http://appliancejunk.com/forums/index.php

The new warning is part of a long term plan to mark all pages served over HTTP as “not secure”.


Can I simply ask my host to migrate my site to HTTPS?
Can I expect migrating to HTTPS to increase my hosting cost?


Thanks,

Online vbgamer45

  • Customizer
  • SMF Super Hero
  • *
  • Posts: 21,559
    • smfhacks on Facebook
    • VBGAMER45 on GitHub
    • @createaforum on Twitter
    • SMF For Free
Re: How do I Migrate my site to HTTPS?
« Reply #1 on: August 17, 2017, 10:30:31 PM »
Yeah  I have that same email kind of sucks big time have about 45 days update it all

You can do in cpanel. You buy a SSL from a provider

If you are on your own vps little tricky. You will need to be on SMF 2.0.14 at least.
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

Offline br360

  • Support Specialist
  • SMF Hero
  • *
  • Posts: 2,398
    • GenXcommunity
Re: How do I Migrate my site to HTTPS?
« Reply #2 on: August 17, 2017, 10:47:11 PM »
Shawnb61 put together a nice tutorial here- https://www.simplemachines.org/community/index.php?topic=555034.msg3934593#msg3934593

To get the ssl certificate, you can contact your host and see what they are offering price wise. A lot of hosts will actually do all the work for you for a fee (varies)


Offline Shambles

  • SMF Hero
  • ******
  • Posts: 5,167
  • Gender: Male
    • i30 Owners Club
Re: How do I Migrate my site to HTTPS?
« Reply #3 on: August 18, 2017, 04:14:58 AM »
My SSL certs are provided & managed via my cPanel, free of charge. See if your cPanel has that option under the SSL branch.


Offline a10

  • Charter Member
  • Sr. Member
  • *
  • Posts: 879
Re: How do I Migrate my site to HTTPS?
« Reply #4 on: August 18, 2017, 06:20:52 AM »
2.0.11, going to 2.0.14 would indeed be the very 1st step (...back up everything before starting). Check the php version.

Ask your host what they can offer regarding ssl. As mentionned, some hosts provide it for free, like my host, needed just a click in control panel.

Then follow the excellent instructions from the tutorial :O)

My .htaccess for https + forcing www

RewriteEngine On
RewriteCond %{HTTPS} off [OR]
RewriteCond %{HTTP_HOST} !^www\.***\.com$ [NC]
RewriteRule ^(.*)$ https://www.***.com/$1 [L,R=301]


2.0.15, ssl, php 7.1.31, MySQL 10.3.13-MariaDB~bionic
Mods: Contact Page, Like Posts, Responsive Curve, Search Focus Dropdown, Add Join Date to Post.

Offline aegersz

  • SMF Hero
  • ******
  • Posts: 1,494
  • Gender: Male
  • "mods" junkie
    • dopetalk
Re: How do I Migrate my site to HTTPS?
« Reply #5 on: August 18, 2017, 09:57:23 AM »
I use letsencrypt (https://community.letsencrypt.org/) with the getssl bash script to provide me 3 monthly free certificates but you will need some technical skills.

maybe a good as place as anywhere to start ... just saying.

my latest find for a generic .htaccesss to force https:

Code: [Select]
RewriteEngine On
# This will enable the Rewrite capabilities

RewriteCond %{HTTPS} !=on
# This checks to make sure the connection is not already HTTPS

RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R=301,L]
# This rule will redirect users from their original location, to the same location but using HTTPS.
# i.e.  http://www.example.com/foo/ to https://www.example.com/foo/
# The leading slash is made optional so that this will work either in httpd.conf
# or .htaccess context
The configuration of my Linux VPS (SMF 2.0 with 145 mods & some assorted manual tweaks) can be found here and notes on my mods can be found here (warning: those links will take you to a drug related forum)

Offline aegersz

  • SMF Hero
  • ******
  • Posts: 1,494
  • Gender: Male
  • "mods" junkie
    • dopetalk
Re: How do I Migrate my site to HTTPS?
« Reply #6 on: August 18, 2017, 06:03:55 PM »
UPDATE: I had to revert back to this more basic .htaccess to get my ssh reverse tunneling and port forwarding for apache working correctly (I am behind a no-incoming-connections-at-all firewall). This seems to be simple and effective:

Code: [Select]
RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://insert-site-name-or-IP-here/$1 [R=301,L]
The configuration of my Linux VPS (SMF 2.0 with 145 mods & some assorted manual tweaks) can be found here and notes on my mods can be found here (warning: those links will take you to a drug related forum)

Offline ApplianceJunk

  • SMF Hero
  • ******
  • Posts: 3,483
    • ApplianceJunk.com
Re: How do I Migrate my site to HTTPS?
« Reply #7 on: September 14, 2017, 09:12:32 PM »
CoreISP took care of this for me, thanks!