Adding https redirect to server

[ajmas]

I noticed the forum server default to http, but does not redirect to https. This meant I was signing up using a non-encrypted connection.

Would it be possible to have http requests redirected to https version of the site?

[JWPlatt]

While the host provides free SSL certificates, they require a dedicated IP that costs $6 per month. Alas.

[McP82]

$6 a month isn't that much of a sum, it could be solved by 12 members willing to donate 50 cents a month, and someone donating $12 will cover it for 2 months.

But then, there has to be some sort of way to make sure that it gets paid every month...

[ajmas]

Unless this is a limitation due to an old Apache version, the one certificate per IP no longer applies. SNI now allows for multiple virtual hosts to share the same IP, while using different certicates:

https://www.digicert.com/kb/ssl-support ... ng-sni.htm

[McP82]

Okay, that's good to know, then. Could it thus be possible to get a https certificate without paying a monthly fee?

[ajmas]

Yes. There was a time when an SSL certificate was a luxury, but now it is essential (non https sites are flagged as insecure by Chrome, for example) and most good providers provide it for free or risk losing customers. Letencrypt has helped change things.

BTW is should be noted the forums server already has https, but the real issue is that the http access is not redirecting to https.

According to a phpBB support thread, to configure: https://www.phpbb.com/community/viewtopic.php?t=2478161 Of course depending on hosting provider the approach might vary.