Author Topic: SSL on personal weather websites  (Read 1382 times)

0 Members and 1 Guest are viewing this topic.

Offline Lucht

  • Member
  • *
  • Posts: 30
SSL on personal weather websites
« on: July 06, 2017, 01:33:18 PM »
That's something I'd be interested in knowing also. I have access to Letsencrypt on my web host, I tried it out but many of the pages on my weather site wouldn't display properly because of the https. Changed back to http and all was well again. I would much prefer to be able to use https though.

Offline Jáchym

  • Meteotemplate Developer
  • Forecaster
  • *****
  • Posts: 8605
    • Meteotemplate
Re: SSL on personal weather websites
« Reply #1 on: July 06, 2017, 01:41:07 PM »
When someone changes from http to https you should always make sure that in your main server config file you have a rule that will redirect any potential users trying to access the page via http automatically to the https site

<VirtualHost *:80>
    ServerName www.example.com
    Redirect / https://www.example.com/
</VirtualHost>

<VirtualHost *:443>
    ServerName www.example.com
    # ... SSL configuration goes here
</VirtualHost>

Offline Lucht

  • Member
  • *
  • Posts: 30
Re: SSL on personal weather websites
« Reply #2 on: July 06, 2017, 01:56:02 PM »
When someone changes from http to https you should always make sure that in your main server config file you have a rule that will redirect any potential users trying to access the page via http automatically to the https site

<VirtualHost *:80>
    ServerName www.example.com
    Redirect / https://www.example.com/
</VirtualHost>

<VirtualHost *:443>
    ServerName www.example.com
    # ... SSL configuration goes here
</VirtualHost>

I just re-enabled it again and have got a .htaccess file in there. But when, for example, a person goes to https://www.sanctuaryweather.info/stormtrack.php they get a blank page unless they know how to enable it (disable protection) in whichever browser they're using.

Scripts that access outside sources are blocked.
« Last Edit: July 06, 2017, 01:58:05 PM by Lucht »

Offline Maumelle Weather

  • Forecaster
  • *****
  • Posts: 1824
    • Maumelle Weather
Re: SSL on personal weather websites
« Reply #3 on: July 06, 2017, 02:23:05 PM »
When someone changes from http to https you should always make sure that in your main server config file you have a rule that will redirect any potential users trying to access the page via http automatically to the https site

<VirtualHost *:80>
    ServerName www.example.com
    Redirect / https://www.example.com/
</VirtualHost>

<VirtualHost *:443>
    ServerName www.example.com
    # ... SSL configuration goes here
</VirtualHost>

I just re-enabled it again and have got a .htaccess file in there. But when, for example, a person goes to https://www.sanctuaryweather.info/stormtrack.php they get a blank page unless they know how to enable it (disable protection) in whichever browser they're using.

Scripts that access outside sources are blocked.

Hi,

Just looked your page. The site you have in an iframe WILL come up as this:  https://www.skywatcher.net.nz/weather/combined.html  , BUT, they need to change their code on their to side and upgrade the Google API to https:// as well, then it will be secure.  May want to pass that along to them.

John
GR2AE, GR3, Cumulus

Offline Lucht

  • Member
  • *
  • Posts: 30
Re: SSL on personal weather websites
« Reply #4 on: July 06, 2017, 02:41:33 PM »

Hi,

Just looked your page. The site you have in an iframe WILL come up as this:  https://www.skywatcher.net.nz/weather/combined.html  , BUT, they need to change their code on their to side and upgrade the Google API to https:// as well, then it will be secure.  May want to pass that along to them.

John

Hi John. Many thanks for your reply.

I'll mention that to him. However, the other page that's a problem with regards to this is https://www.sanctuaryweather.info/satellite.php

Offline Jáchym

  • Meteotemplate Developer
  • Forecaster
  • *****
  • Posts: 8605
    • Meteotemplate
Re: SSL on personal weather websites
« Reply #5 on: July 06, 2017, 05:45:38 PM »
Hi,
this is a common problem, in my template I also have 2 or 3 plugins which use external sources (forecasts etc.) and if those pages are not HTTPS then there is nothing you can do and these plugins only work for HTTP people. It is a bit unfortunate that those who use the more advanced and no doubt better solution (https) are currently still a bit discriminated in this respect...
It is a bit of a viscous cycle, since to solve this you would need more and more pages to be https, on the other hand more people dont want to update if they use external sources because it would be a problem. I am 100% sure that over time it will be part of every webhosting as well and so in a few year's time everyone will be running HTTPS, but it will take some time.

Offline Lucht

  • Member
  • *
  • Posts: 30
Re: SSL on personal weather websites
« Reply #6 on: July 06, 2017, 08:34:48 PM »
So the answer is "be patient", I guess  :-(

 

anything