Go Back   vb.org Archive > vBulletin Article Depository > Read An Article > General Articles
Reload this Page How to enable full ssl
FAQ Community Calendar Today's Posts Search

Reply
Page 2 of 2 1 2
 
Thread Tools
How to enable full ssl
final kaoss
Join Date: Apr 2006
Posts: 1,314

 

Show Printable Version Email this Page Subscription
final kaoss final kaoss is offline 02-16-2018, 10:00 PM
I'll be discussing how to enable full ssl and how to block unsecure content here.

The first big thing to do comes from a vbulletin.com article and is revised a bit.

Quote:
Originally Posted by https://www.vbulletin.com/forum/articles/4361080-converting-your-forum-to-https
vBulletin 3
Go to vBulletin Options > vBulletin Options > Site Name / URL / Contact Details.
Edit 'Forum URL' and add the 's' into the URL.
For example, if your URL is http://www.contoso.com/forum, change it to https://www.contoso.com/forum

Then go to Settings > vBulletin Options > vBulletin Options > Server Settings & Optimization Options > Use Remote YUI
Set this to None.

vBulletin 4
Go to Settings > Options > Site Name / URL / Contact Details.
Edit 'Forum URL' and add the 's' into the URL.
For example, if your URL is http://www.contoso.com/forum, change it to https://www.contoso.com/forum

Then go to Settings > Options > Server Settings & Optimization Options > Use Remote YUI
Set this to None.

vBulletin 5
Go to vBulletin Options > vBulletin Options > Site Name / URL / Contact Details.
Edit these three settings: 'vBulletin URL'; 'Login URL'; 'Core URL' and add the 's' into the URL.
For example, if your URL is http://www.contoso.com/forum, change it to https://www.contoso.com/forum
NOTE: Do not remove the word 'core' at the end of the core URL. You will break your site!

All Versions
Then go to Settings > Options > Server Settings & Optimization Options > Use Remote jQuery
Set this to None.

The key to all three vBulletin versions is that all you do in the URL settings is change http to https. Do not alter any other part of the URL.

Once you have changed these settings, go to AdminCP > Maintenance > General Update Tools, and rebuild the styles. (In vB3 this is AdminCP > Maintenance > Update Counters). Leave the default settings and just run this update tool.
After you get this done, you want to set a rewrite rule in htaccess.

This is what I use to rewrite http to https.

Code:
  RewriteEngine on
  #Options +FollowSymLinks
  ################https##############
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
  ################https##############
Next go to cloudflare and enable these settings (under Crypto)
* SSL - Full
* Edge Certificates - make one "The certificates in the pack listed below are managed and auto-renewed by Cloudflare."
*HSTS
Code:
HTTP Strict Transport Security (HSTS)
Enforce web security policy for your website.
Status: On
Max-Age: 12 months
Include subdomains: On
Preload: On
No-sniff: On
* Require Modern TLS - On
* Opportunistic Encryption - On
* TLS 1.3 - Enabled+0RTT
* Automatic HTTPS Rewrites - On

Quote:
Why Should I use Automatic HTTPS Rewrites?
If your site contains links or references to HTTP URLs that are also available securely via HTTPS, Automatic HTTPS Rewrites can help. If you connect to your site over HTTPS and the lock icon is not present, or has a yellow warning triangle on it, your site may contain references to HTTP assets (?mixed content?).




Mixed content is often due to factors not under the website owner?s control such as embedded third-party content or complex content management systems. By rewriting URLs from ?http? to ?https?, Automatic HTTPS Rewrites simplifies the task of making your entire website available over HTTPS, helping to eliminate mixed content errors and ensuring that all data loaded by your website is protected from eavesdropping and tampering.




Does Automatic HTTPS Rewrites fix all mixed content errors?
No. Only URLs that are known to support HTTPS will be rewritten. We use data from EFF?s HTTPS Everywhere and Chrome?s HSTS preload list, among others, to identify which domains support HTTPS. If your zone is not on one of these lists, only active content will be rewritten. Passive content (such as images) will not be rewritten and will still cause mixed content errors.
That does it for cloudflare, after doing all of the above, your site is ready for SSL!

*Important! One last thing to do to ensure full SSL compatability is making sure that no insecure requests come through, this is how to do it with a description of what it does in the link.

Pop this in your headerincludes

Code:
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
More info: CSP: upgrade-insecure-requests - HTTP | MDN



One extra thing that I do is use this mod. It fetches external images and serves them locally, meaning that they will not violate the mixed content policy due to the rewrite we did earlier.

There is also another mod that you can use to locally serve insecure (http) images.
https://vborg.vbsupport.ru/showthread.php?t=288060


CKEditor Loading Issues:
For users experiencing loading issues of ckeditor on vbulletin 4 with https enabled while using Chrome, here is a fix.

https://www.vbulletin.com/forum/foru...52#post4378752
Reply With Quote
  #12  
Old 08-24-2018, 04:18 PM
gsmlover4u's Avatar
gsmlover4u gsmlover4u is offline
 
Join Date: Jan 2007
Posts: 348
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
sir i did every thing

--------------- Added [DATE]1535137346[/DATE] at [TIME]1535137346[/TIME] ---------------

I upgrade to latest version vb 4.2.5 but icons still not showing
Reply With Quote
  #13  
Old 08-26-2018, 06:52 PM
final kaoss final kaoss is offline
 
Join Date: Apr 2006
Posts: 1,314
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Ok I guess I need to rephrase that... What else did you do that wasn't in the first post?

Because there is nothing in that first post that would stop images from showing on a site.. So to help everyone figure this thing out, we need more details.
Reply With Quote
  #14  
Old 09-02-2018, 02:20 PM
final kaoss final kaoss is offline
 
Join Date: Apr 2006
Posts: 1,314
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Alright it looks like gsmlover's issue has been resolved, if anyone else has issues with images not loading, try messing with Hotlink Protection settings in Cpanel.

Quote:
Originally Posted by gsmlover4u
Quote:
Originally Posted by final kaoss
It looks like other people had issues with images not loading after they enabled SSL. Some people reported that going in to cpanel & turning off hotlinking worked for them.

https://stackoverflow.com/questions/...ow-under-https
I just change http to https in the

hotlink protection
Allowed Referrers:

https://gsmlover.com
https://www.gsmlover.com
Reply With Quote
  #15  
Old 03-20-2019, 04:08 PM
final kaoss final kaoss is offline
 
Join Date: Apr 2006
Posts: 1,314
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
For users experiencing loading issues of ckeditor on vbulletin 4 with https enabled, here is a fix.

https://www.vbulletin.com/forum/foru...52#post4378752
Reply With Quote
  #16  
Old 06-02-2019, 04:26 PM
drifterwolf drifterwolf is offline
 
Join Date: May 2008
Posts: 4
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
So I recently finally got around to setting up my site for SSL. Everything went fine, but my post icons are still loading with the old http:// URL and not the new https:// URL.
I have checked to make sure that the icons in the Post Icon Manager show the proper URL. (I've tried both relative path and full URL) and the forum still points to the old http.

I've set up the redirect in .htaccess as well, but doesn't seem to work on the icons.

I've checked it on the default VB4 style, and I get the same issue, so I don't think it's a style problem.

I've tried deleting the Post Icon and replacing it, still didn't fix it. I've tried deleting the image itself and somehow it still shows up on my browser (And I cleared cache on the browser and VB so I'm completely at a loss).

I've seen other people have this issue though it seems like simple changes fixed it, so I'm not sure why mine is acting up (other than a network cache problem?)

Any help would be appreciated.
Reply With Quote
  #17  
Old 06-03-2019, 12:04 AM
Mattwhf Mattwhf is offline
 
Join Date: May 2016
Posts: 190
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by drifterwolf View Post
So I recently finally got around to setting up my site for SSL. Everything went fine, but my post icons are still loading with the old http:// URL and not the new https:// URL.
You need to find in codes to change it to https. I am sure it used a fixed link for your icon.
Reply With Quote
  #18  
Old 06-03-2019, 12:58 PM
drifterwolf drifterwolf is offline
 
Join Date: May 2008
Posts: 4
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Like the actual PHP files? Is there a way to do that via the admin console?

--------------- Added [DATE]1559608846[/DATE] at [TIME]1559608846[/TIME] ---------------

I found it! In case anyone else is having this problem, they were listed in vBulletin Options-> Thread Display Options (showthread)
Reply With Quote
  #19  
Old 07-20-2019, 01:39 PM
TJF TJF is offline
 
Join Date: Dec 2001
Posts: 21
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
We recently switched our forums to SSL. It was a bit of an ordeal because I don't think our host fully knew what they were doing. I think one tech was able do what we wanted by changing all the http links to https, but then another tech did another restore from a backup and wiped out the changes.

I want to change all references of http://www.mysite.com to https://www.mysite.com within on entire vBulletin database.

I know this is the SQL query to change it just in the posts.

UPDATE post SET pagetext = REPLACE(pagetext, 'http://www.mysite.com', 'https://www.mysite.com');

What query would I run to search and replace the entire database? I will, of course, make a backup before running it and check to see the links have been successfully converted.
Reply With Quote
  #20  
Old 08-11-2019, 08:33 PM
matrex722's Avatar
matrex722 matrex722 is offline
 
Join Date: Jan 2007
Posts: 161
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
thanks alot for that great informitions
Reply With Quote
Reply
Page 2 of 2 1 2

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT. The time now is 03:26 AM.

Contact Us - Archive - Top

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04676 seconds
  • Memory Usage 2,308KB
  • Queries Executed 24 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (3)bbcode_code
  • (5)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)modsystem_article
  • (1)navbar
  • (4)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (2)post_thanks_box_bit
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit
  • (10)post_thanks_postbit_info
  • (9)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 
Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • fetch_musername
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • post_thanks_function_fetch_thanks_bit_start
  • post_thanks_function_show_thanks_date_start
  • post_thanks_function_show_thanks_date_end
  • post_thanks_function_fetch_thanks_bit_end
  • post_thanks_function_fetch_post_thanks_template_start
  • post_thanks_function_fetch_post_thanks_template_end
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete