Author Topic: Non secure HTTP website google phase 2  (Read 11656 times)

0 Members and 1 Guest are viewing this topic.

Offline PaulMy

  • Forecaster
  • *****
  • Posts: 5508
    • KomokaWeather
Re: Non secure HTTP website google phase 2
« Reply #50 on: May 06, 2017, 05:53:37 PM »
Hi Randy,
Quote
If happy with host I just purchased the certificate from these guys after researching they were for real and payed with paypal. Its a little complicated but I figured it out using the Cpanel on GoDaddy. I used the comodo certificate.
What plan do you have with GoDaddy?
I have the Deluxe Hosting Linux and I recall I had a couple of conversations with them about a year or more ago about changing to cPanel.

Thanks,
Paul

Offline ValentineWeather

  • Forecaster
  • *****
  • Posts: 6362
    • Valentine Nebraska's Real-Time Weather
Re: Non secure HTTP website google phase 2
« Reply #51 on: May 06, 2017, 05:56:12 PM »


Hi John,

I use ICDSoft. I am on their Business Plan. They use Let's Encrypt HTTPS. It's free with their hosting. Outstanding support.

I noticed they use COMODO also as the base purchase, ale-cart without business account. Same one I'm using for $4 year.
« Last Edit: May 06, 2017, 06:01:49 PM by ValentineWeather »
Randy

Offline ValentineWeather

  • Forecaster
  • *****
  • Posts: 6362
    • Valentine Nebraska's Real-Time Weather
Re: Non secure HTTP website google phase 2
« Reply #52 on: May 06, 2017, 06:00:33 PM »
Hi Randy,
Quote
If happy with host I just purchased the certificate from these guys after researching they were for real and payed with paypal. Its a little complicated but I figured it out using the Cpanel on GoDaddy. I used the comodo certificate.
What plan do you have with GoDaddy?
I have the Deluxe Hosting Linux and I recall I had a couple of conversations with them about a year or more ago about changing to cPanel.

Thanks,
Paul

Cheapest plan with Cpanel and Apache server.
Randy

Offline Jáchym

  • Meteotemplate Developer
  • Forecaster
  • *****
  • Posts: 8605
    • Meteotemplate
Re: Non secure HTTP website google phase 2
« Reply #53 on: May 06, 2017, 06:14:34 PM »
So thats like 130/year and with limited bandwidth?! ... but it is not much different to what my provider has if I wanted to go https (except at least webspace and bandwidth is unlimited).

Offline Maumelle Weather

  • Forecaster
  • *****
  • Posts: 1824
    • Maumelle Weather
Re: Non secure HTTP website google phase 2
« Reply #54 on: May 06, 2017, 06:21:58 PM »


Hi John,

I use ICDSoft. I am on their Business Plan. They use Let's Encrypt HTTPS. It's free with their hosting. Outstanding support.

I noticed they use COMODO also as the base purchase, ale-cart without business account. Same one I'm using for $4 year.

The Let's Encrypt cert can only be seen with an account, to my knowledge.
GR2AE, GR3, Cumulus

Offline ValentineWeather

  • Forecaster
  • *****
  • Posts: 6362
    • Valentine Nebraska's Real-Time Weather
Re: Non secure HTTP website google phase 2
« Reply #55 on: May 06, 2017, 06:32:15 PM »
So thats like 130/year and with limited bandwidth?! ... but it is not much different to what my provider has if I wanted to go https (except at least webspace and bandwidth is unlimited).

I paid less with multi year plan. Think it was something like $8 month.
Randy

Offline jgillett

  • Forecaster
  • *****
  • Posts: 1187
  • Boltek, Win7 Pro, ToA
    • TiggrWeather Phoenix
Re: Non secure HTTP website google phase 2
« Reply #56 on: May 06, 2017, 06:55:12 PM »
I'm considering https://www.mddhosting.com/hosting.php. LetsEncrypt is available for free from their cP.
John
W7JKG

Offline ValentineWeather

  • Forecaster
  • *****
  • Posts: 6362
    • Valentine Nebraska's Real-Time Weather
Re: Non secure HTTP website google phase 2
« Reply #57 on: May 07, 2017, 08:12:38 AM »
Anyone going with secure site don't forget to force all connections over. With GoDaddy https://www.godaddy.com/help/redirect-http-to-https-automatically-8828

Here is a secure site checker
https://www.sslshopper.com/ssl-checker.html
Randy

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2573
    • SouthEast Lincoln, NE Weather
Re: Non secure HTTP website google phase 2
« Reply #58 on: May 07, 2017, 08:17:59 AM »
I see you've been hard at work securing the green padlock on almost all of your pages, Randy.  Way to go! =D>
Regards, Jerry Wilkins
gwwilk@gmail.com

Offline ValentineWeather

  • Forecaster
  • *****
  • Posts: 6362
    • Valentine Nebraska's Real-Time Weather
Re: Non secure HTTP website google phase 2
« Reply #59 on: May 07, 2017, 08:34:54 AM »
 :grin: Thanks, I still have a few I can't do much with like Road Cams.
Randy

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2573
    • SouthEast Lincoln, NE Weather
Re: Non secure HTTP website google phase 2
« Reply #60 on: May 07, 2017, 09:00:49 AM »
To those considering self-hosting because they have a very fast broadband connection with a permanent IP address (1 GB up and down here thanks to Allo's fiber optic connection), trialing various Linux distributions is fairly easy on a fast computer with 16GB of RAM.  The key is Oracle's VM VirtualboxHere is an excellent video tutorial by SUSE on installing and using Virtualbox.

I've got openSUSE set up and am currently installing Ubuntu.  Debian will be next followed by CentOS.  Gaining familiarity with these distributions should help me decide which would serve best should I decide to host my weather web site myself.  This would certainly cut down on traffic between here and GoDaddy and save some bucks in the long run.  Security and maintenance are huge concerns, though.

I guess my recent foray into the world of Raspberry Pi's has emboldened me to return to the land of Linux after a decade or so when I gave up ever hoping to achieve anything worthwhile.  I have a Raspberry Pi serving my alternate NOAA radio feed, and I have migrated a private music site using Wordpress to another Raspberry Pi.  I also have ADS-B Pi's serving FlightAware and FlightRadar24.  The Pi's when assembled are a little larger than an old flip-phone but amazingly powerful and versatile.
Regards, Jerry Wilkins
gwwilk@gmail.com

Offline weatherc

  • Senior Contributor
  • ****
  • Posts: 278
Re: Non secure HTTP website google phase 2
« Reply #61 on: May 07, 2017, 09:52:23 AM »
:grin: Thanks, I still have a few I can't do much with like Road Cams.

Just proxy them via your own server with a small PHP-script, that how i do it for the roadcams whats not available in HTTPS :grin:

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2573
    • SouthEast Lincoln, NE Weather
Re: Non secure HTTP website google phase 2
« Reply #62 on: May 07, 2017, 11:19:08 AM »
After my Linux installs, this is what my VM Virtualbox Manager looks like:
 [ You are not allowed to view attachments ]

Now to spend lots of time exploring.  In sharp contrast with the installations of a decade or two ago, these installations were scripted perfectly and worked flawlessly.

I'll eventually pick a favorite.  I still have a trial (1 year) of SUSE Raspberry Pi to install once a new 64GB MicroSD card arrives from Amazon.
Regards, Jerry Wilkins
gwwilk@gmail.com

Offline tmabell

  • Forecaster
  • *****
  • Posts: 391
    • Mishawaka Weather
Re: Non secure HTTP website google phase 2
« Reply #63 on: May 08, 2017, 08:50:12 AM »
Would you be willing to share a little about how your are doing this?

:grin: Thanks, I still have a few I can't do much with like Road Cams.

Just proxy them via your own server with a small PHP-script, that how i do it for the roadcams whats not available in HTTPS :grin:

Offline weatherc

  • Senior Contributor
  • ****
  • Posts: 278
Re: Non secure HTTP website google phase 2
« Reply #64 on: May 08, 2017, 09:13:54 AM »
Would you be willing to share a little about how your are doing this?

A simple example:

Code: [Select]
<?php

$source
=$_GET["s"];
$img=$_GET["i"];
$type=substr($img,-3);

$type="image/jpeg";
if(
$type=="jpg"){$type="image/jpeg";}
if(
$type=="png"){$type="image/png";}

if(
$source=="digitraf"){$url="http://weathercam.digitraffic.fi/";}

$file=$url.$img;

header('Content-Type:'.$type);
readfile($file);

Called like this: https://nordicweather.net/scripts/ssl_image.php?s=digitraf&i=C1453508.jpg

 :grin:

Offline tmabell

  • Forecaster
  • *****
  • Posts: 391
    • Mishawaka Weather
Re: Non secure HTTP website google phase 2
« Reply #65 on: May 08, 2017, 09:16:23 AM »
Thank you!  That is good information.

Offline tmabell

  • Forecaster
  • *****
  • Posts: 391
    • Mishawaka Weather
Re: Non secure HTTP website google phase 2
« Reply #66 on: May 08, 2017, 09:26:05 AM »
What I thought might be easy isn't so much!  If I wanted to use this image, how would the code appear? http://climate.cod.edu/data/surface/US_zoom/contour/current/USZOOM.fronts.gif

Offline weatherc

  • Senior Contributor
  • ****
  • Posts: 278
Re: Non secure HTTP website google phase 2
« Reply #67 on: May 08, 2017, 09:37:55 AM »
What I thought might be easy isn't so much!  If I wanted to use this image, how would the code appear? http://climate.cod.edu/data/surface/US_zoom/contour/current/USZOOM.fronts.gif

You can of coure do it it many ways but...
-add
  if($type=="gif"){$type="image/gif";}
  if($source=="usfronts"){$url="http://climate.cod.edu/data/surface/US_zoom/contour/current/";}
-call /ssl_image.php?s=usfronts&i=USZOOM.fronts.gif

I did my script dynamic so multiple images can be called with same script and so its easy to add new images/sources if needed.

Offline spweather

  • Contributor
  • ***
  • Posts: 125
    • Sand Point Weather
Re: Non secure HTTP website google phase 2
« Reply #68 on: May 08, 2017, 11:14:54 AM »
I have been wondering about the purpose/pros/cons of a VM.

Jerry (gwwilk), Can you please tell me why you say this...
Quote
The key is Oracle's VM Virtualbox.

Are you running the VM as the primary (first) OS/software installed?

I can understand why a VM would be handy testing multiple OS's, but what are it's advantages in a production environment. I would be worried fiddling with an OS under the VM while my production OS was also runnung under that VM for fear of bringing everything down.

Dennis
Regards,
Dennis

- Davis Wireless Vantage Pro2 Plus w/24hr FARS
- Davis (Ultra)Sonic Anemometer
- Boltek/MicroLDN TOA Lightening Detection
- Porcupine Labs LR4/Fluke 414D Laser Rangefinder snow depth measuring sensor


Offline tmabell

  • Forecaster
  • *****
  • Posts: 391
    • Mishawaka Weather
Re: Non secure HTTP website google phase 2
« Reply #69 on: May 08, 2017, 11:24:15 AM »
I'm not getting the desired results. I'm using the php code:

Code: [Select]
<?php

$source
=$_GET["s"];
$img=$_GET["i"];
$type=substr($img,-3);

$type="image/gif";
if(
$type=="gif"){$type="image/gif";}

if(
$source=="usfronts"){$url="http://climate.cod.edu/data/surface/US_zoom/contour/current/";}

$file=$url.$img;

header('Content-Type:'.$type);
readfile($file);

What I thought might be easy isn't so much!  If I wanted to use this image, how would the code appear? http://climate.cod.edu/data/surface/US_zoom/contour/current/USZOOM.fronts.gif

You can of coure do it it many ways but...
-add
  if($type=="gif"){$type="image/gif";}
  if($source=="usfronts"){$url="http://climate.cod.edu/data/surface/US_zoom/contour/current/";}
-call /ssl_image.php?s=usfronts&i=USZOOM.fronts.gif

I did my script dynamic so multiple images can be called with same script and so its easy to add new images/sources if needed.
« Last Edit: May 09, 2017, 05:27:26 PM by tmabell »

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2573
    • SouthEast Lincoln, NE Weather
Re: Non secure HTTP website google phase 2
« Reply #70 on: May 08, 2017, 11:28:11 AM »
I have been wondering about the purpose/pros/cons of a VM.

Jerry (gwwilk), Can you please tell me why you say this...
Quote
The key is Oracle's VM Virtualbox.

Are you running the VM as the primary (first) OS/software installed?

I can understand why a VM would be handy testing multiple OS's, but what are it's advantages in a production environment. I would be worried fiddling with an OS under the VM while my production OS was also runnung under that VM for fear of bringing everything down.

Dennis
It's strictly for testing, Dennis.  I'm trying to find the best fit for my needs.
Regards, Jerry Wilkins
gwwilk@gmail.com

Offline weatherc

  • Senior Contributor
  • ****
  • Posts: 278
Re: Non secure HTTP website google phase 2
« Reply #71 on: May 08, 2017, 11:53:36 AM »
I'm not getting the desired results. I'm using the php code:

Hmmm...

You could as a test hardcode it like

Code: [Select]
<?php
$file
='http://climate.cod.edu/data/surface/US_zoom/contour/current/USZOOM.fronts.gif';

header('Content-Type: image/gif');
readfile($file);

Offline spweather

  • Contributor
  • ***
  • Posts: 125
    • Sand Point Weather
Re: Non secure HTTP website google phase 2
« Reply #72 on: May 08, 2017, 12:39:25 PM »
Quote
It's strictly for testing, Dennis.  I'm trying to find the best fit for my needs.

Thanks Jerry,

I've been trying to understand VM's ever since the local computer store/service provider, installed Windows Server under VMware for my Vet's office. Like you I have used them for testing/fiddling but for a production Server, it seems like it would just be a source of additional overhead.

Dennis
Regards,
Dennis

- Davis Wireless Vantage Pro2 Plus w/24hr FARS
- Davis (Ultra)Sonic Anemometer
- Boltek/MicroLDN TOA Lightening Detection
- Porcupine Labs LR4/Fluke 414D Laser Rangefinder snow depth measuring sensor


Offline dupreezd

  • Forecaster
  • *****
  • Posts: 512
Re: Non secure HTTP website google phase 2
« Reply #73 on: May 08, 2017, 01:10:25 PM »
Here are just some of the advantages of VM's.

In a single Host environment.
1. You build one template of a particular install Win7, Server 2016, Linux. Then you just clone it to a working computer in a matter of minutes.
2. Snapshot a computer, makes changes, and if you break it, just restore from the snapshot point of time.
3. Share resources such as CPU, memory and drive space.
4. Reduce power, hardware and space foot print.
5. Boot time is much faster

Multiple Host environment.

All of the above plus:-
1. Load balancing across Hosts.
2. Move a RUNNING guest from one Host to another if maintenance is required on a particular host.
3. Add extra physical drive space then assign it to a guest as required.

Note:- you still need licenses for each individual Guest you are running.



Davis VP2 6163 | WiFi Logger
CWOP - FW0717
Blitzortung 2100

Offline tmabell

  • Forecaster
  • *****
  • Posts: 391
    • Mishawaka Weather
Re: Non secure HTTP website google phase 2
« Reply #74 on: May 08, 2017, 01:11:59 PM »
Unfortunately that yields the same result.

I'm not getting the desired results. I'm using the php code:

Hmmm...

You could as a test hardcode it like

Code: [Select]
<?php
$file
='http://climate.cod.edu/data/surface/US_zoom/contour/current/USZOOM.fronts.gif';

header('Content-Type: image/gif');
readfile($file);