Make Server Force HTTPS

[LewisPotato]

Hi,

I'm having an issue with my xampp (apache) server not forcing https properly, but when I add '$_SERVER['HTTPS'] = 'on';' to the end of my config.php it works but I'd have the apache server force https instead of xenforo itself, what do I need to do to achieve this?

Thanks

 

[MySiteGuy]

In .htaccess at the top:

RewriteCond %{HTTPS} !on
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

 

[LewisPotato]

In .htaccess at the top:

RewriteCond %{HTTPS} !on
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

For some reason the installer still shows as insecure, I don't really want to enter all the MySQL info and the administrator account if the connection is not secure.

 

[mcatze]

Did you have an SSL Certificate and install it correctly?

Here is a guideline: https://xenforo.com/community/resources/how-to-implement-ssl-to-secure-http-traffic-https.5425/

 

[LewisPotato]

I installed a Cloudflare Origin Certificate.
Here is my configuration: https://pastebin.com/Z4bG6KTJ

It's annoying because if I go to any directory like /styles/ or /library/ it'll show as insecure when it isn't supposed to.

 

[mcatze]

Did you install local with a xampp or hosting?

 

[LewisPotato]

Did you install local with a xampp or hosting?

Yeah I installed xampp then configured it.

 

[mcatze]

But local on your private computer? If so, you should try it with lets encrypted for local install.

What are you using in xampp, ubuntu or something else?

 

[LewisPotato]

But local on your private computer? If so, you should try it with lets encrypted for local install.

What are you using in xampp, ubuntu or something else?

It's a production/dedicated server and it runs on Windows Server 2016.

I don't run the forum on my personal computer.

If you need to take a look at the forum itself you can do so here.

 

[mcatze]

I did not see any issues with an certificate, Chrome says its all fine..

 

[LewisPotato]

I did not see any issues with an certificate, Chrome says its all fine..

It's very strange.. If I made up a directory like /thisisannoying/ it says it dont exist and says its secure but if I do something like /styles/flexile/flexile/logo-klodghirz.png/ it'll show as insecure.

 

[mcatze]

I see not problems. Maybe a cache thing..

 

[LewisPotato]

I see not problems. Maybe a cache thing..

View attachment 191579

I'll try resetting the Cloudflare cache.

 

[mcatze]

Also the browser cache and maybe the server cache.

 

[LewisPotato]

Also the browser cache and maybe the server cache.

The problem seems to be on my end with my browser as it works fine on my phone, I'm gonna figure out what is causing it. Thank you for assisting me throughout the process I appreciate it.

 

[mcatze]

Such things you should always test with different browsers and/or devices. Good luck and have fun with XenForo..