We build. You grow.

Get best community software here

Start a social network, a fan-site, an education project with oxwall - free opensource community software

SSL Certificate | Forum

E.D.
E.D. Feb 26 '16
Hello,
for our side, we now want to get a SSL Certificate
so that the page about hhtps: // is reached.

What changeovers are then required
Den Team
Den Feb 29 '16

Hello E.D


This is simple as 1-2-3:

- Purchase a certificate from authorised company

- setup it with your hosting

- refelect protocl changes in SITE_URL constant in ow_includes/config.php

Tammy
Tammy Feb 29 '16
you left out 4-5-6-7-8-9-10
-Edit ow_core/application.php to part fix the stupid url rewrite problem that oxwall wont fix

Remove or comment out the line 527: $this->httpVsHttpsRedirect();
-/ow_core/application.php

Line 941:
            $markup = str_replace("http:", "https:", $markup);

Replace with:
            $markup = str_replace("", "", $markup);

Line 945:
                $search[$index] = str_replace($matches[2][$index], str_replace("http:", "https:", $matches[2][$index]), $search[$index]);

Replace with:
                $search[$index] = str_replace($matches[2][$index], str_replace("", "", $matches[2][$index]), $search[$index]);


-6-7-8-9-10 problems theres no fix for yet 

Tammy
Tammy Feb 29 '16

Quote from Den

Hello E.D


This is simple as 1-2-3:

- Purchase a certificate from authorised company

- setup it with your hosting

- refelect protocl changes in SITE_URL constant in ow_includes/config.php

please stop making people think oxwall works ssl when it does not 
E.D.
E.D. Feb 29 '16
So Oxwall not work with ssl?
Tammy
Tammy Feb 29 '16
half works with them fixes 
Unus
Unus Mar 14 '16
don't by ssl certs

use letsencrypt.org

they provide free ssl certs and they can be setup to renew automatically


like Tammy says oxwall works half way with ssl; you can enable it after you install the cert but if any of you customers/clients/users are pasting a http link to an image anywhere where they can input text the browswer loading that page will scream that it is not secured. it will end up with a very weird experience in the end.

also not to mention that if you had your sited on http for awhile and then you make the switch you will have in the static html links to images with which you'll have to find and correct to manually yourself. overall I would say oxwall and https right now it is not really working. it is BUT...

I am big on security and also big on good users exeperience, if we write to oxwall team and we let them know this is important then they might actually fix it.


Marcel van Rooijen
Marcel van Rooijen Jul 29 '17
my site is ssl but no images show on frontend, anybody?
TonyKa
TonyKa Mar 4 '18
Hi Den,


isnt there any complete guide for this?


Also if i change the config, i do not need to edit / run a script in SQL? How i will convert all http to https in the database?


Many thanks
Quote from Den

Hello E.D


This is simple as 1-2-3:

- Purchase a certificate from authorised company

- setup it with your hosting

- refelect protocl changes in SITE_URL constant in ow_includes/config.php


Chris_W
Chris_W Mar 4 '18

See if your web host has AutoSSL or Lets Encrypt installed, if they do you can get a free certificate auto installed on your domain.


The images do not show because they are coming from an http source not https. That's one of the problems with Oxwall, it doesn't download the images and serve them over https, it pulls them from the original sources. One way around that is to use Cloudflare which can be set to serve everything via https through its servers. Alternatively only use sources that serve from https.


After this the content on the site will naturally update to https without messing with the database.

Both my sites Red Sky July and Nell Bryden Fans are both running okay under SSL.

The Forum post is edited by Chris_W Mar 4 '18
Tesla Kuhn
Tesla Kuhn Jan 7

Quote from Tammy you left out 4-5-6-7-8-9-10
-Edit ow_core/application.php to part fix the stupid url rewrite problem that oxwall wont fix

Remove or comment out the line 527: $this->httpVsHttpsRedirect();
-/ow_core/application.php

Line 941:
            $markup = str_replace("http:", "https:", $markup);

Replace with:
            $markup = str_replace("", "", $markup);

Line 945:
                $search[$index] = str_replace($matches[2][$index], str_replace("http:", "https:", $matches[2][$index]), $search[$index]);

Replace with:
                $search[$index] = str_replace($matches[2][$index], str_replace("", "", $matches[2][$index]), $search[$index]);


-6-7-8-9-10 problems theres no fix for yet 


i understand it has been 3 years since you posted this. is there a way to find these on their new lines, and receive any updated instructions? any help is most appreciated. tyvm.
Oxwall Germany Club
Did you already setup an SSL certificate? If yes, do you have any problems?
Oxwall Germany Club
Topic was moved from General Chat.
Alexander Mirvis
Any ideas on how to get images pulled via SSL? Keep getting this error and I checked everything.
Attachments:
  ssl.jpg (739Kb)
ViXiV Technologies
Seen this a few times...


a single insecure element will break all SSL, so have to check which element / photo is causing the issue. I would say it's probably a base / plugin issue.

Oxwall Germany Club
Please don't double post. Please use the following topic to discuss about your report: https://developers.oxwall.com/forum/topic/63622
Hybrid
Hybrid Feb 14

Quote from Alexander Mirvis Any ideas on how to get images pulled via SSL? Keep getting this error and I checked everything.

If anyone is still struggling with Mixed Content issues even after trying all the possible solutions provided on the Oxwall Forum, try this:


Why not just add this to your page settings "Custom Head Code" --> Go to Admin Dashboard --> Settings --> Page Settings --> Add this meta tag to your "Custom Head Code" section:


<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">


For a deeper understanding, please refer to the following: https://developers.google.com/...fixing-mixed-content