this sites SSL cert if borked

zzottt · Post by **zzottt** » Fri Jul 10, 2020 10:54 pm

the SSL is assigned to sni.dreamhost.com

zzottt · Post by **zzottt** » Fri Jul 10, 2020 11:27 pm

no wonder you have a bot problem! HAHA come on man get with the modern age and make this site https

Post by **bio** » Sat Jul 11, 2020 12:41 pm

Whelp... it didn't break it, but it also doesn't seem to work.

I recieved a valid certificate via Let's Encrypt Authority (if you click the "not secure" by the url, you'll see it). and added the following to the very top of my my .htaccess:

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301,NE]

That should, in theory, force the server to use "https" on all pages served under this domain, but it isn't. Perhaps there's another setting in dreamhost that makes this go.

Homework, ugh

Post by **bio** » Sat Jul 11, 2020 12:46 pm

Homework completed... changing it from "https://%{HTTP_HOST}%{REQUEST_URI}" to "https://%damagedpeople.com%{REQUEST_URI}" worked.

Yay for that!

It still shows the domain as "Not secure" though. Other than changing the cookie settings for "cookie secure" to "yes", I'm not sure what to do, of even if I need to do anything (this is not my forte at all).

Post by **bio** » Sat Jul 11, 2020 4:41 pm

So, I requested SSL on three of my domains (all I do is click a button that says "add it, bitch!"):

damagedpeople.com
toneparsons.com
whitewomanblackdog.com

So far, WWBD is the only one that shows as SSL with the lock by the url. I edited the .htaccess on DP and did absolutely zero configuration on TP or WWBD, one just works, the other two are nadda. The .htacess for TP and WWBD are currently identical with zero reference to SSL, so dafuk if I know.

Ugh.

I'll keep on looking into it.

zzottt · Post by **zzottt** » Sat Jul 11, 2020 9:57 pm

I have a https at the least. its not fully https but I appropriate you making that much effective

Post by **bio** » Sun Jul 12, 2020 12:10 am

zzottt wrote: ↑Sat Jul 11, 2020 9:57 pm I have a https at the least. its not fully https but I appropriate you making that much effective

I appropriate your support on this!

Post by **bio** » Tue Jul 14, 2020 8:49 am

I figured it out. I had hard coded a single image in the template file as http, which was fine when the site was http, but that one thing was what kept it from rolling over to https after getting the certificate installed.

Long story short... I fixed it... kind of.

I've noticed that it hops from secure to not secure depending on what you're viewing on the site. Any pages showing a list of threads seems to be good, but go into the actual thread and it's no longer secure... weird. I'll check to make sure I didn't hard code something else (like an avatar or smiley). At least I'm on the correct path now

Post by **bio** » Tue Jul 14, 2020 9:07 am

And I found it (I had used http: on my personal homepage address under my profile, which loads under every page).

Stupid!!

At least it's fixed when I post now. If you notice any other pages are borked, let me know with a link to the page so I can run it down.

Post by **eddiecanuck** » Tue Jul 14, 2020 11:06 am

I gots a lock sign now!

I was going to post a picture but forgot this isn't THAT kind of editor and I would have to host the picture for all eternity and well... it just ain't worth it.

Nice job on the SSL though.

Post by **bio** » Tue Jul 14, 2020 6:02 pm

Phpbb does have its restrictions, though if it let anyone upload an image, my hosting space would be gone in a flash.

Thanks though on the compliment, I appreciated it!

this sites SSL cert if borked

this sites SSL cert if borked

Re: this sites SSL cert if borked

Re: this sites SSL cert if borked

Re: this sites SSL cert if borked

Re: this sites SSL cert if borked

Re: this sites SSL cert if borked

Re: this sites SSL cert if borked

Re: this sites SSL cert if borked

Re: this sites SSL cert if borked

Re: this sites SSL cert if borked

Re: this sites SSL cert if borked