[LIVE] Forum is now 100% SSL Supported

[Peter]

You can access our forums by typing: https://qbforums.shiki.hu

Let me know if you run into any issues. (Please, state your browser, OS.)
(For me, with Chrome's latest version, it works flawless.)

Ps.: For the next 2 hours we running with Cloudflare OFF.

[Peter]

NOTE: There are still a few quirks, so we are running in Flexible SSL for now only.
I will iron out the issues tonight.

(So currently we are using Cloudflare's SSL only.)

[sledgehammer_999]

Yes, I can access the forum through HTTPS. Nice!
Are those certs free for cloudflare users?

[100%]

Good job, thanks!

[Peter]

[quote="sledgehammer_999"]
Yes, I can access the forum through HTTPS. Nice!
Are those certs free for cloudflare users?
[/quote]

The current temporary (flex), yes. But it's a "fake", since server and Cloudflare communicates unencrypted.
But! There is a cert for shiki.hu too, which will be used after I fix the quirks.
(For some unknown reason Apache refused to serve to page even after loading it properly, and I don't want to cause downtime at peak hours.)

[sledgehammer_999]

In case you didn't know startssl provides free one-year certs(that can be renewed) and it recognized by all major browsers: https://www.startssl.com/

[Peter]

Cheers!

(The current cert will be a Comodo one, that's what my wallet allowed me to afford - and meh, others are just way toooo expensive anyway.
It does not have the green bar in the browser - those are extremely expensive, but it will show 100% green in every browser on all platforms.)

* I will start working on the issue at 20:00 GMT+1 or so, buckle up.
(The forum will be mainly available, but short downtimes are possible. The whole thing will only take a short period of time, like an hour or two.)

[Nemo]

Thanks mate.

[Peter]

Alright, found the issue why I could not enable the full support, just one moment and we are live. : )

[sledgehammer_999]

For some reason "HTTPS Everywhere" firefox plugin doesn't switch to the https version automatically when I input "qbforums.shiki.hu" in the address bar...

[Peter]

As far as I know that plugin only redirects you if the site is in the plugin's database.
It's here: https://www.eff.org/https-everywhere/atlas/index.html
https://www.eff.org/https-everywhere/rulesets

I will contact them once the full support is in place.

[sledgehammer_999]

[quote="Peter"]
As far as I know that plugin only redirects you if the site is in the plugin's database.
It's here: https://www.eff.org/https-everywhere/atlas/index.html
https://www.eff.org/https-everywhere/rulesets

I will contact them once the full support is in place.
[/quote]

Hmm, I was under the impression that the plugin tried in the background for every URL to change http->https and see if that works, and then redirect firefox.

[Peter]

AND WE ARE ON.

100% strict SSL on the entire forums. (Not the fake SSL by Cloudflare.)

If you don't see the green padlock, the reason is simple: Someone linked an image from a non-secure site.
For example Nemo's http signatures break the padlock sign.

But even if that happens, the rest is served over secured HTTPS.

[ciaobaby]

Tee hee

That was somewhat ironic, there I was reading this thread (over https)  and went to "Unread replies" and BAM!!

SSL handshake error

[Peter]

Could you give me a "copy URL" from the HTTPS version of the "unread replies"?

I have already modified all the settings / paths / themes / even the ico... it must be some leftover stuff.

* By the way the site serves most stuff through HTTPS even for HTTP-only visitors - because SMF cannot really handle a hybrid-mode. Not that it matters, even old IE can browse HTTPS sites, and Google/other bots can also index them.