Author Topic: Converting to HTTPS  (Read 780 times)

0 Members and 1 Guest are viewing this topic.

Offline tshattuck

  • Forecaster
  • *****
  • Posts: 337
    • Your Local Weather - Clay, NY
Converting to HTTPS
« on: April 10, 2019, 03:11:09 PM »
I am considering switching to a secure website. I need a SSL Certificate but not sure what else is required.
My web host is GoDaddy, they told me I only need the SSL certificate I am not sure that's correct.
 I have several questions:
 a. What are the benefits of switching?
 b. What has to be changed on my website for this to work and display the green padlock in browsers?

Any assistance is appreciated.

Offline txweather.org

  • Forecaster
  • *****
  • Posts: 1597
    • Texas Weather
Re: Converting to HTTPS
« Reply #1 on: April 10, 2019, 03:36:05 PM »
The cert is one part. You will also need to convert anything on your code that references http to https.

Here is a good read on why SSL:

https://www.sslrenewals.com/blog/why-is-ssl-important-benefits-of-using-ssl-certificate

----
Davis Vantage Pro2 Plus +FARS|Meteobridge Nano SD|Meteohub|Meteobridge MR-3020|WU KTXSPRIN75/PWS JRARGWX75/CWOP EW2972/WBB TXWDVUE75/Blitzortung ID: 1142|AWEKAS: 12095
Donations are welcome: https://paypal.me/ffuentesb

Offline saratogaWX

  • Administrator
  • Forecaster
  • *****
  • Posts: 9257
  • Saratoga, CA, USA Weather - free PHP scripts
    • Saratoga-Weather.org
Re: Converting to HTTPS
« Reply #2 on: April 10, 2019, 05:35:52 PM »
GoDaddy shared cPanel hosting really encourages you to buy a cert from them (extra $).  It is also possible (if you're fairly expert) to use https://www.sslforfree.com/ to get a cert from letsencrypt (free) along with public/private key set.  It can be installed using the cPanel SSL screen, but.. it's not too easy.  sslforfree has a tutorial at https://www.youtube.com/watch?v=K90RxdQp9OE on how to use cPanel/SSL to install the cert for your site.

When I hosted the SWN network on a GoDaddy cPanel site, I used that method.  I've since moved SWN to my VPS hosting, and the Plesk panel has built-in support for LetsEncrypt certs (and automatic renewals, since those certs are only good for 3 months).

The Saratoga templates are HTTPS ready (AFAIK) if you are up-to-date with the current distribution.  Your mods/additions may need to be screened for http links to images or JavaScripts -- only one instance will break the padlock due to mixed http/https content.
Ken True/Saratoga, CA, USA main site: saratoga-weather.org
Davis VP1+ FARS, Blitzortung RED, GRLevel3, WD, WL, VWS, Cumulus, Meteobridge
Free weather PHP scripts/website templates - update notifications on Twitter saratogaWXPHP

Offline tshattuck

  • Forecaster
  • *****
  • Posts: 337
    • Your Local Weather - Clay, NY
Re: Converting to HTTPS
« Reply #3 on: April 10, 2019, 06:37:12 PM »
Ken:
Thanks for the feedback. You are correct when you say GoDaddy really encourages you to buy a cert from them.  :roll:

If I understand correctly on my website I would need to change all instances of http to https. So if I am pulling an image that is not HTTPS that page won't give me the green padlock. I am using your templates with some minor modifications. Does the HTACCESS file also need to be changed?

I can see why more forum members haven't converted. This could be quite time consuming. I will have to give this more thought.  :shock:


Offline Jasiu

  • Forecaster
  • *****
  • Posts: 947
    • LexMAWeather
Re: Converting to HTTPS
« Reply #4 on: April 10, 2019, 09:16:48 PM »
The .htaccess file needs to be changed if you want http requests to redirect to https.

The contents of mine is:

Code: [Select]
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
https://lexmaweather.info
On Mastodon: @LexMAWeather@toot.community

Offline tshattuck

  • Forecaster
  • *****
  • Posts: 337
    • Your Local Weather - Clay, NY
Re: Converting to HTTPS
« Reply #5 on: April 11, 2019, 01:19:13 PM »
Jasiu:
Thanks for the feedback.



 

anything