Using SSL
 

I have SSL on my site but it seems to be screwing up mods. Is there any way to initiate partial SSL for those areas that may need it? Currently I have an htacces redirect to the https[sitename] If I remove the redirect will SSL still be imitated. Kind of new to the SSL thing. Thanks. Don't want to dump it as I spent money and I just got it... thx

Hi pityocamptes! Which mods are screwed up? We just implemented SSL on our site as well - it took a bit of time and tweaking - but we've got the green lock everywhere now! Let me know, I bet we could get it all working.

Th chat box - keep getting a General Help box in FF and IE10 also in IE only one icon appears in the chatbox. Also, because of mixed content in ff you have to click on the shield and allow content. Same with IE. If I could avoid this prompt to the user it would be great. If you could provide help on how you did yours I would appreciate it. You can pm me if the info is sensitive. Thank you!

It would be handy to have ssl for signing in and registering but http for ordinary browsing but I can't figure out how to do it?

Yes, that is what I am thinking!! That way the mixed content crap doesn't keep popping up, which I am sure most users will not know what to do. Anyone know how to do this? Or using some other config with ssl that works????

I'd like some help on this too.

Hi everyone:

1) Have you updated the Forum / Homepage URL to https?

2) Run a search in your templates for http - what comes up?

3) Submit the Insecure Warning Page URLs to this site: http://www.whynopadlock.com/

Let me know what comes up as a result of 2 & 3 :) We can work on getting each one fixed, 1 by 1.

--------------- Added [DATE]1381710786[/DATE] at [TIME]1381710786[/TIME] ---------------

For setting up individual pages as HTTPS, use .htaccess:

http://stackoverflow.com/questions/5...-with-htaccess

I got a whole list of templates that have http in them. Not sure what to do with this long list. Thanks....

To get rid of the mixed content in firefox and not have to hit the shield every time you log in do the following:


In your address bar where you would normally see our site's URL, you are going to type in (about:config) without the parenthesis.

After you do that you will type in (mixed) in the search box and look for the following Preference Names and make sure they are all set as (false)

https://vborg.vbsupport.ru/external/2013/10/19.jpg

And you are set !

Cheech - yea, I added that, but less savvy users may not know, would like to have it "fixed" for everyone... thx

#3 Done on home page (index)

Total number of items: 183
Number of insecure items: 57

A lot of people link to images hosted elsewhere. I don't see any way around that mixed content.

Hi guys,

ACP -> Styles & Templates -> Replacement Variable Manager

Find your style(s) and press [Add New Replacement Variable]

Search for text: http://yoursite.com
Replace with text: https://yoursite.com

(Of course, replace yoursite with your actual domain)

Alternatively, if you use www...

Search for text: http://www.yoursite.com
Replace with text: https://www.yoursite.com


Then run Maintenance -> Clear System Cache

Now run the same URL through whynopadlock, and let me know what comes out

--------------- Added [DATE]1381775002[/DATE] at [TIME]1381775002[/TIME] ---------------

If you use Google Analytics or AdSense, make sure to get the most recent versions of their code, which are now written to work for both http & https

Ok, followed the instructions, here is what I have, looks the same before the https replacement var...

Total number of items: 183
Number of insecure items: 57



--------------- Added [DATE]1381775334[/DATE] at [TIME]1381775334[/TIME] ---------------

It would seem it is mixed content...

Hi pityocamptes, where did you include the Google AJAX libraries? In templates or in the hard PHP files? Could also be a plugin?

Ok, fixed the ajax lib as they are being pulled from google. Here is what is left after writing var defs for the ajax...

Total number of items: 183
Number of insecure items: 3


--------------- Added [DATE]1381775990[/DATE] at [TIME]1381775990[/TIME] ---------------

I dont know how I'm going to work around this since feedburner, as far as I know, does not support https...

Hmmm that is a tough one - only thing I can think of, is using a different feeds manager with https support :(

Been looking. Anyone know of an rss feed with https suport??? Thanks.

--------------- Added [DATE]1381777136[/DATE] at [TIME]1381777136[/TIME] ---------------

Is there something similar for vbulletin, and would it work?

http://wordpress.org/support/topic/f...-of-feedburner

--------------- Added [DATE]1381777477[/DATE] at [TIME]1381777477[/TIME] ---------------

Same thing with my widgets... i suspect it will be the same for images, etc. that get loaded onto the site. I wonder if there is something automatic that will allow http in an https site without user having to change browser settings, etc...

--------------- Added [DATE]1381797499[/DATE] at [TIME]1381797499[/TIME] ---------------

Anyone figure this out yet? I'm sure this has come up before??