Setting up HTTPS

Discussion regarding Joomla! 3.x security issues.

Moderators: Bernard T, mandville, fcoulter, PhilD, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Post Reply
lillianfidler
Joomla! Explorer
Joomla! Explorer
Posts: 411
Joined: Mon Mar 31, 2008 8:28 pm
Location: St. John's, Newfoundland, Canada
Contact:

Setting up HTTPS

Post by lillianfidler » Thu Aug 31, 2017 12:40 pm

I created a certificate with dreamhost. Then I followed the instructions I found online to add code to the .htaccess file:
RewriteEngine On
RewriteCond %{HTTPS} OFF
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

I then changes the live site in configuration.php file from http to https and changed the parameter in global configuration (joomla) to (force https).

I've done this with several other sites and it's worked fine, however with this site thespacenl.com - it seems to break the site - in the administrator area, the address bar says https but on the live site it says not secure - and http.

Any ideas what I'm doing wrong with this particular site?

User avatar
abernyte
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 3570
Joined: Fri May 15, 2009 2:01 pm
Location: Écosse - Scozia - Escocia - Škotija -स्कॉटलैंड

Re: Setting up HTTPS

Post by abernyte » Sat Sep 02, 2017 4:11 pm

Hi,
Are you using the free LetsEncrypt SSL cert with Dreamhost? If so then you possibly don't require the .htaccess code.Take it out and see what happens.
It ain't what you don't know that gets you into trouble. It's what you know for sure that just ain't so. Twain

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 19105
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ UK/ S'pore/Jakarta/ North America
Contact:

Re: Setting up HTTPS

Post by leolam » Sun Sep 03, 2017 2:02 pm

Abernyte is right. You should not have to add anything ever to your htaccess. Dreamhost uses cPanel and you just install the certificate under the SSL-tab in cPanel and set in global config "force SSL=yes"

I would also advise to buy a SSL from Namecheap since it is so much more cost effective. A Comodo Positive SSL is below US$ 10/year

Leo 8)
Joomla's #1 Professional Support Provider:
-> Joomla Professional Support: https://gws-desk.com -
-> Joomla Specialized Hosting Solutions: https://gws-host.com -
Member Joomla Bug Squad & Joomla CMS Release Team

davemmason46
Joomla! Apprentice
Joomla! Apprentice
Posts: 11
Joined: Tue May 09, 2017 12:57 am

Re: Setting up HTTPS

Post by davemmason46 » Thu Sep 21, 2017 11:58 pm

There are many less expensive hosts and ssl avenues than namecheap. webhostpython.com = free ssl for as long as you have a site, solid state drives, better servers and some other more technical.
I just left namecheap and took all my clients with me to WHP and all of us are very happy. About 3 times the overall speed. Joomla just snaps on there.

jenal
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Wed Dec 20, 2017 12:55 pm

Re: Setting up HTTPS

Post by jenal » Wed Dec 20, 2017 1:00 pm

I have same issue. Css not load properly, even when choose option https entire site. Is there work around for this issue?

p/s: Sorry hijack thread.

User avatar
kitepascal
Joomla! Intern
Joomla! Intern
Posts: 53
Joined: Thu Aug 27, 2009 2:58 pm
Contact:

Re: Setting up HTTPS

Post by kitepascal » Wed Dec 20, 2017 1:16 pm

@jenal: Sounds like a mixed content issue.
That means not all ressources are loaded via https but have to.

Can you post a link to your site please?

jenal
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Wed Dec 20, 2017 12:55 pm

Re: Setting up HTTPS

Post by jenal » Wed Dec 20, 2017 2:04 pm

Here is link: [ redacted ]

p/s: Cert is for testing only before go live
Last edited by toivo on Wed Dec 20, 2017 2:23 pm, edited 1 time in total.
Reason: mod note: removed the URL - read the forum rules about posting links to sites containing warez

User avatar
luisalves
Joomla! Apprentice
Joomla! Apprentice
Posts: 25
Joined: Sat Dec 16, 2017 1:36 am
Location: Netherlands
Contact:

Re: Setting up HTTPS

Post by luisalves » Sun Dec 31, 2017 4:01 pm

Updates: 31/12/2017
I agree with Abernyte!
You should use Free Let's Encrypt SSL certificate of Dreamhost. Or can order a Comodo Positive SSL from Namecheap - Easy to install and use, it's very cheap!
- Grey SSL color: The connection to this website is not fully secure because this page (web, blog) contains URLs http.
When I visit thespacenl.com by Chrome, I can see 2 version: https & http
This problem is when you add wrong code to the .htaccess file: "RewriteCond %{HTTPS} !=on" not "RewriteCond %{HTTPS} OFF"
Please re-add this code:

Code: Select all

# Redirect all links from HTTP to HTTPS
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*) https://%{SERVER_NAME}/$1 [R,L]
Result with screenshot:
You do not have the required permissions to view the files attached to this post.

ednarb
Joomla! Apprentice
Joomla! Apprentice
Posts: 28
Joined: Mon Jun 15, 2015 6:21 pm

Re: Setting up HTTPS

Post by ednarb » Tue Jan 30, 2018 12:23 am

Hi, I have a lot of doubt about this issue, because this is my first configuration for ssl. After reading the above publications I noticed that the configurations are not correct.

1 - First problem: the support hostgator instructed me to added the code in .htaccess file:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

I went to see in the configuration.php and I did not find the line "live site" . Until now I not changed the parameter in global configuration of Joomla!! The site works fine, but now in the mobile version does not open in some browsers a message "your connection is not secure". Is this problem because of the wrong configuration?

How I can fix it and make the settings correctly? I'm afraid the site might have some problem in the future.


Post Reply

Return to “Security in Joomla! 3.x”