Page 1 of 1
Adding https redirect to server
Posted: Fri Oct 23, 2020 9:35 pm
by ajmas
I noticed the forum server default to http, but does not redirect to https. This meant I was signing up using a non-encrypted connection.
Would it be possible to have http requests redirected to https version of the site?
Re: Adding https redirect to server
Posted: Fri Oct 23, 2020 10:33 pm
by JWPlatt
While the host provides free SSL certificates, they require a dedicated IP that costs $6 per month. Alas.
Re: Adding https redirect to server
Posted: Mon Oct 26, 2020 3:11 pm
by McP82
$6 a month isn't that much of a sum, it could be solved by 12 members willing to donate 50 cents a month, and someone donating $12 will cover it for 2 months.
But then, there has to be some sort of way to make sure that it gets paid every month...
Re: Adding https redirect to server
Posted: Mon Oct 26, 2020 3:28 pm
by ajmas
Unless this is a limitation due to an old Apache version, the one certificate per IP no longer applies. SNI now allows for multiple virtual hosts to share the same IP, while using different certicates:
https://www.digicert.com/kb/ssl-support ... ng-sni.htm
Re: Adding https redirect to server
Posted: Mon Oct 26, 2020 3:33 pm
by McP82
Okay, that's good to know, then. Could it thus be possible to get a https certificate without paying a monthly fee?
Re: Adding https redirect to server
Posted: Mon Oct 26, 2020 3:39 pm
by ajmas
Yes. There was a time when an SSL certificate was a luxury, but now it is essential (non https sites are flagged as insecure by Chrome, for example) and most good providers provide it for free or risk losing customers. Letencrypt has helped change things.
BTW is should be noted the forums server already has https, but the real issue is that the http access is not redirecting to https.
According to a phpBB support thread, to configure:
https://www.phpbb.com/community/viewtopic.php?t=2478161 Of course depending on hosting provider the approach might vary.