XF 1.5 Moving to HTTPS

[CarpCharacin]

I am moving UFK to HTTPS. How do I enable the image proxy so all the content shows up as secure? I haven't got the SSL working quite yet, but I will. I am using letsencrypt.

 

[Jake Bunce]

Admin CP -> Home -> Options -> Messages -> Image and Link Proxy

 

[CarpCharacin]

Thanks. What does it mean to proxy links?

 

[Jake Bunce]

https://xenforo.com/community/threads/link-proxy-purpose.103744/#post-974778

It's mostly for logging/analysis purposes, especially with the referrer tracking in 1.5.

 

[CarpCharacin]

When I get the HTTPS working should I enable it? I want to make it show up as fully secure.

 

[Jake Bunce]

When I get the HTTPS working should I enable it? I want to make it show up as fully secure.

You can enable it before or after. But once https is enabled you should enable the proxy to avoid mixed content warnings.

 

[DarkGizmo]

If i'm on a shared host, how do you enable HTTPS?

 

[CarpCharacin]

If i'm on a shared host, how do you enable HTTPS?

It depends on the host. Does your host support letsencrypt? I am on an unmanaged VPS.

 

[DarkGizmo]

Not sure. I'd have to ask them. My host is Hawkhost if that helps.

 

[ENF]

Not sure. I'd have to ask them. My host is Hawkhost if that helps.

Not on the supported list: https://community.letsencrypt.org/t/web-hosting-who-support-lets-encrypt/6920

There are other options, your host may have some plans for SSL certificates for a decent price.

 

[TPerry]

It depends on the host. Does your host support letsencrypt? I am on an unmanaged VPS.

And you need to enable the proxy.. since you are running under SSL now.
And as often as I'm in shell there, you might as well be on a managed VPS.

 

[TPerry]

Not on the supported list: https://community.letsencrypt.org/t/web-hosting-who-support-lets-encrypt/6920

May not be on the list, but http://blog.hawkhost.com/2016/02/18/free-ssl-certificates-lets-encrypt-now-supported/
And it gives directions on how to enable them.

 

[CarpCharacin]

And you need to enable the proxy.. since you are running under SSL now.

I can't. I am banned from the admincp.

And as often as I'm in shell there, you might as well be on a managed VPS.

I have had the VPS for less than a month and I am learning.

 

[Ozzy47]

I can't. I am banned from the admincp

How are you banned from your own ACP?

 

[CarpCharacin]

How are you banned from your own ACP?

It was a .htaccess password file problem.

 

[TPerry]

No, it was a failure to modify your vhost definition to fit your environment issue. You now have the explanation on how to secure it properly.

 

[Ozzy47]

No, it was a failure to modify your vhost definition to fit your environment issue. You now have the explanation on how to secure it properly.

So he told a fib, it was not a htaccess issue?

 

[CarpCharacin]

So he told a fib, it was not a htaccess issue?

I did not set a htaccess password. It wasn't a .htaccess file issue, but it was a .htaccess password issue.

 

[TPerry]

I did not set a htaccess password. It wasn't a .htaccess file issue, but it was a .htaccess password issue.

When you have
Allow XXX.XXX.XXX.XXX;
Deny All;
in the vhost stanza for a location and
your IP is not there in the place of XXX.XXX.XXX.XXX you aren't going to gain access.
I realize it's a lot to try and take in, but it's also why I recommended you stick with a quality shared hosting provider instead of going to a VPS that you had no knowledge of how to administer.

So he told a fib, it was not a htaccess issue?

Actually, no and yes. One of the issues was it uses htpasswd access, and the file it pointed to was empty. The other was the vhost stanza that did not have his home IP in it and it denying access to any other IP.

 

[Ozzy47]

Actually, no and yes. One of the issues was it uses htpasswd access, and the file it pointed to was empty. The other was the vhost stanza that did not have his home IP in it and it denying access to any other IP.

Ahh, so basically just another example of jumping in head first without knowing how deep the water is.