|
How to enable full ssl
I'll be discussing how to enable full ssl and how to block unsecure content here.
The first big thing to do comes from a vbulletin.com article and is revised a bit. Quote:
This is what I use to rewrite http to https. Code:
RewriteEngine on* SSL - Full * Edge Certificates - make one "The certificates in the pack listed below are managed and auto-renewed by Cloudflare." *HSTS Code:
HTTP Strict Transport Security (HSTS)* Opportunistic Encryption - On * TLS 1.3 - Enabled+0RTT * Automatic HTTPS Rewrites - On Quote:
*Important! One last thing to do to ensure full SSL compatability is making sure that no insecure requests come through, this is how to do it with a description of what it does in the link. Pop this in your headerincludes Code:
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">One extra thing that I do is use this mod. It fetches external images and serves them locally, meaning that they will not violate the mixed content policy due to the rewrite we did earlier. There is also another mod that you can use to locally serve insecure (http) images. https://vborg.vbsupport.ru/showthread.php?t=288060 CKEditor Loading Issues: For users experiencing loading issues of ckeditor on vbulletin 4 with https enabled while using Chrome, here is a fix. https://www.vbulletin.com/forum/foru...52#post4378752 |
After you enable https, you most likely will experience a drop in traffic for some time. You can read more about that here.
http://www.seoblog.com/2017/07/rankings-drop-https-ssl/ There are benefits including security plus using less server cpu & bandwidth. Some are
Binary instead of textual: this is something which makes transfer and parsing of the data much more efficient. Binary data transfer is also much less prone to errors. Fully multiplexed: again, simply put, with HTTP the problem was that each connection was prone to blocking the connetions after it. Imagine yourself in the queue to get into your favourite sports match, but rather than having multiple entry points, you only had 1 turnstile. You can imagine that things can get very very slow. Multiplexing allows multiple files and requests to be transferred at the same time. In the turnstile example, rather than have one person going in at a time, we have 10 gates, with 10 turnstiles going in together. Use one conection for parallelism: as we mentioned before, when a connection is expensive to create, if you keep creating and closing it for every resource you need, you're going to create a serious overhead issue. Multiplexing allows the same connection to be reused over and over again. Imagine the connection as a pipe through which data keeps flowing until you don't have any more data. Also, do note that for any website, you will typically have the browser talking to multiple web servers for various 3rd party scripts and resources (Facebook sharing scripts, Twitter, Google Analtics, Ad networks etc. etc.) Having one connection for each of these is more efficient. Header compression is also another efficient way of removing several of the overheads associated with having to retrieve several different resources from the same or multiple web servers. Once again, typically rather than having to perform multiple to and fro trips, one trip is typically enough. Allows servers to push resources proactively: this is a way that the server, rather than waiting for the client browser to request the different resources as per our first example, it will proactively send them resources they will probably need. This is called HTTP/2 Server push. Thanks to collectiveray for the info. |
I did but now forums icon not showing
www.gsmlover.com |
Quote:
|
Quote:
can you guide me please |
Your vb 4.x forum LOGO can be found here:
admin cp -> styles and templates -> style manager -> style variable editor -> GO Search for TITLEIMAGE and click it. The path appears on the right, and it can be fixed there. Mike |
Quote:
RewriteEngine On RewriteCond %{HTTPS} on RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] |
Right now it looks like you have a ton of 404 errors, for images.
https://www.webpagetest.org/result/1...all_view_step1 Something isn't configured right... If I go to a image from the results page, that image stays cached until I hit Shift +F5 in chrome (forces it to clear cache for a page & redownload everything as if it's never been there). As far as I can tell this seems to be an apache issue, as I can view the images if I open them in either the webpagetest results page or if I view your source code and click that link. However, if I try to right click an image and open it in a new tab, it throws a 404 error. I suggest you try some of these links for a potential fix. https://www.google.com/search?ei=bCx....0.ChDRl6wSBBU |
Quote:
--------------- Added [DATE]1535044964[/DATE] at [TIME]1535044964[/TIME] --------------- Quote:
on the same server, apache can be the problem? |
I can't say for sure but it looks like it. Check out this thread where someone had a kindof similar issue.
https://www.linuxquestions.org/quest...he-4175456462/ Let me ask you this... when you enabled SSL for your gsm forum.. what all did you do? Because if you have ssl enabled already, then all you should need to use what I mentioned in step 1... Code:
vBulletin 4<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests"> with the htaccess code as a optional failsafe incase that doesn't catch it all. |
| All times are GMT. The time now is 06:52 PM. |
Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
| X vBulletin 3.8.12 by vBS Debug Information | |
|---|---|
|
|
 More Information |
|
|
Template Usage:
Phrase Groups Available:
|
Included Files:
Hooks Called:
|