Hello E.D

This is simple as 1-2-3:

- setup it with your hosting

- refelect protocl changes in SITE_URL constant in ow_includes/config.php

Remove or comment out the line 527: $this->httpVsHttpsRedirect();
-/ow_core/application.php

-6-7-8-9-10 problems theres no fix for yet 

use letsencrypt.org

they provide free ssl certs and they can be setup to renew automatically

like Tammy says oxwall works half way with ssl; you can enable it after you install the cert but if any of you customers/clients/users are pasting a http link to an image anywhere where they can input text the browswer loading that page will scream that it is not secured. it will end up with a very weird experience in the end.

also not to mention that if you had your sited on http for awhile and then you make the switch you will have in the static html links to images with which you'll have to find and correct to manually yourself. overall I would say oxwall and https right now it is not really working. it is BUT...

I am big on security and also big on good users exeperience, if we write to oxwall team and we let them know this is important then they might actually fix it.

isnt there any complete guide for this?

Also if i change the config, i do not need to edit / run a script in SQL? How i will convert all http to https in the database?

Quote from Tammy you left out 4-5-6-7-8-9-10
-Edit ow_core/application.php to part fix the stupid url rewrite problem that oxwall wont fix

Remove or comment out the line 527: $this->httpVsHttpsRedirect();
-/ow_core/application.php

Line 941:
            $markup = str_replace("http:", "https:", $markup);

Replace with:
            $markup = str_replace("", "", $markup);

Line 945:
                $search[$index] = str_replace($matches[2][$index], str_replace("http:", "https:", $matches[2][$index]), $search[$index]);

Replace with:
                $search[$index] = str_replace($matches[2][$index], str_replace("", "", $matches[2][$index]), $search[$index]);

-6-7-8-9-10 problems theres no fix for yet 

a single insecure element will break all SSL, so have to check which element / photo is causing the issue. I would say it's probably a base / plugin issue.

If anyone is still struggling with Mixed Content issues even after trying all the possible solutions provided on the Oxwall Forum, try this:

Why not just add this to your page settings "Custom Head Code" --> Go to Admin Dashboard --> Settings --> Page Settings --> Add this meta tag to your "Custom Head Code" section:

For a deeper understanding, please refer to the following: https://developers.google.com/...fixing-mixed-content