Page 1 of 1

HTTPS please

Posted: Mon Apr 18, 2016 5:42 am
by Manhattan Glutton
IIRC, the forum is hosted on DreamHost. DreamHost has a single button you can click to automatically register with Let's Encrypt - a free certificate authority.

Since we are sending our passwords in plaintext to the forum, it would be kind of nice, I suppose, if we could leverage this free and easy solution. Could the person(s) who have access to the DreamHost panel click the button? (and even if it's not on DreamHost, you can still get a free cert)

Re: HTTPS please

Posted: Mon Apr 18, 2016 7:07 am
by jb
I clicked the button. Says it'll take a bit to get set up. I'll post if I see something. If it's more than clicking that button I'm coming after you Mike. ;)

J

Re: HTTPS please

Posted: Mon Apr 18, 2016 9:33 am
by jb
it appears to be working now.

JB

Re: HTTPS please

Posted: Mon Apr 18, 2016 9:55 am
by Manhattan Glutton
Neat! Thanks, jb.

I know I said just one button :), but it may also be useful to (when you have time):
1. if necessary, update any phpBB configuration or links that reference http
2. make a root .htaccess like this to redirect http to https (i have this verbatim):

Code: Select all

RewriteEngine on

# Check for POST Submission
RewriteCond %{REQUEST_METHOD} !^POST$

# Forcing HTTPS
RewriteCond %{HTTPS} !=on [OR]
RewriteCond %{SERVER_PORT} 80

#rule
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]

Re: HTTPS please

Posted: Mon Apr 18, 2016 10:36 am
by fluffy
phpBB has its own .htaccess so I had to put the rule in there. And it's in.

Re: HTTPS please

Posted: Mon Apr 18, 2016 11:03 am
by Manhattan Glutton
Don't we love our admins? We love our admins.

Re: HTTPS please

Posted: Mon Apr 18, 2016 1:30 pm
by Lunkhead
This is awesome. Thanks admins and squeaky wheel!

Re: HTTPS please

Posted: Mon Apr 18, 2016 6:04 pm
by fluffy
It's something I'd been wanting to do for a while myself, so thanks MG for raising it as an issue and JB for pressing the button. :)