Elxis CMS Forum

Support => Security => Topic started by: kyomar on June 04, 2016, 02:19:01

Title: SSL from Let's Encrypt
Post by: kyomar on June 04, 2016, 02:19:01

Hi elxis community, I have activated the Let's Encrypt free SSL Certificates at my host and would like to access my whole website through SSL. I know I can activate SSL in the settings but this is only for some parts of the site. Furthermore is this 301 redirect correct?
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
Any advise is very welcome. Thank you!

Title: Re: SSL from Let's Encrypt
Post by: farmville450 on June 04, 2016, 10:36:33

Put these lines in the .htaccess file:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]

and will redirect automatically all visitors to https protocol.
Then set the URL address of your site to https://www.yousite.com/ in general settings of Elxis.
If you have images that are declared with http protocol you have to change them to https protocol because will appear to visitors that they are not to a secure connection.

Title: Re: SSL from Let's Encrypt
Post by: kyomar on June 06, 2016, 01:36:23

thanks farmville450 for your reply - much appreciated. I investigated a little bit further and it's not as easy as just adding the mentioned code in .htaccess. I have tried the site with https: and it's totally messed up. I don't know whether the template is ready for this. Perhaps datahell could help - this would be really awesome.
Thank you very much,
Markus

Title: Re: SSL from Let's Encrypt
Post by: webgift on June 06, 2016, 09:22:17

Hello @kyomar,
In case that you are interested please share a back-end and FTP access of your website using
a Private message and i will help you.

Title: Re: SSL from Let's Encrypt
Post by: kyomar on June 07, 2016, 13:52:24

Thanks webgift for your offer, very appreciated, but I would prefer not to give away my access details. Nothing personal, but I take security serious and it starts with not giving away passwords easily. If you could guide me through the steps that would be great.
Thank you very much for your time,
Markus

Title: Re: SSL from Let's Encrypt
Post by: farmville450 on June 07, 2016, 15:43:16

Did you change the site url to your elxis general settings from http://www.yoursite.com to https://www.yoursite.com?
I don't think that templates has something to do with your problem.
The Elxis team consists of professionals and do not have to fear anything. You can change passwords as often as you want.

Title: Re: SSL from Let's Encrypt
Post by: webgift on June 08, 2016, 11:59:32

Hello @kyomar,
Unfortunately we can't decode the phrase of yours: "I have tried the site with https: and
it's totally messed up. I don't know whether the template is ready for this."
.. so it's hard to find out where and what you've exactly messed up!

Title: Re: SSL from Let's Encrypt
Post by: kyomar on June 09, 2016, 01:42:51

Hello Everyone, thanks a lot for all the help and input. @webgift, if I enter https:// in the browser address bar and leave the settings in admin with http: the website gets messed up. Anyway, I decided not to switch to https: at the moment as I fear losing my web search rankings. I will do this early next year when it's more quite for our accommodation business.
Again thanks a lot for all your help. Elxis rocks!
Markus

Title: Re: SSL from Let's Encrypt
Post by: webgift on June 09, 2016, 11:03:26

Hello @kyomar,
You should set the https protocol to your settings as well for sure. I don't think that such
change will negatively affect your ranking.