Setting up HTTPS

[lillianfidler]

I created a certificate with dreamhost. Then I followed the instructions I found online to add code to the .htaccess file:
RewriteEngine On
RewriteCond %{HTTPS} OFF
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

I then changes the live site in configuration.php file from http to https and changed the parameter in global configuration (joomla) to (force https).

I've done this with several other sites and it's worked fine, however with this site thespacenl.com - it seems to break the site - in the administrator area, the address bar says https but on the live site it says not secure - and http.

Any ideas what I'm doing wrong with this particular site?

[abernyte]

Hi,
Are you using the free LetsEncrypt SSL cert with Dreamhost? If so then you possibly don't require the .htaccess code.Take it out and see what happens.

[leolam]

Abernyte is right. You should not have to add anything ever to your htaccess. Dreamhost uses cPanel and you just install the certificate under the SSL-tab in cPanel and set in global config "force SSL=yes"

I would also advise to buy a SSL from Namecheap since it is so much more cost effective. A Comodo Positive SSL is below US$ 10/year

Leo

[davemmason46]

There are many less expensive hosts and ssl avenues than namecheap. webhostpython.com = free ssl for as long as you have a site, solid state drives, better servers and some other more technical.
I just left namecheap and took all my clients with me to WHP and all of us are very happy. About 3 times the overall speed. Joomla just snaps on there.

[jenal]

I have same issue. Css not load properly, even when choose option https entire site. Is there work around for this issue?

p/s: Sorry hijack thread.

[kitepascal]

@jenal: Sounds like a mixed content issue.
That means not all ressources are loaded via https but have to.

Can you post a link to your site please?

[jenal]

Here is link: [ redacted ]

p/s: Cert is for testing only before go live

[luisalves]

Updates: 31/12/2017
I agree with Abernyte!
You should use Free Let's Encrypt SSL certificate of Dreamhost. Or can order a Comodo Positive SSL from Namecheap - Easy to install and use, it's very cheap!
- Grey SSL color: The connection to this website is not fully secure because this page (web, blog) contains URLs http.
When I visit thespacenl.com by Chrome, I can see 2 version: https & http
This problem is when you add wrong code to the .htaccess file: "RewriteCond %{HTTPS} !=on" not "RewriteCond %{HTTPS} OFF"
Please re-add this code:

Code: Select all

# Redirect all links from HTTP to HTTPS
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*) https://%{SERVER_NAME}/$1 [R,L]

Result with screenshot:

[ednarb]

Hi, I have a lot of doubt about this issue, because this is my first configuration for ssl. After reading the above publications I noticed that the configurations are not correct.

1 - First problem: the support hostgator instructed me to added the code in .htaccess file:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

I went to see in the configuration.php and I did not find the line "live site" . Until now I not changed the parameter in global configuration of Joomla!! The site works fine, but now in the mobile version does not open in some browsers a message "your connection is not secure". Is this problem because of the wrong configuration?

How I can fix it and make the settings correctly? I'm afraid the site might have some problem in the future.