HTTPS Update

Having a problem with your site? Post in here, and we'll see what we can do to help!
Post Reply
User avatar
Williams
Admin
Admin
Posts: 824
Joined: Fri Oct 09, 2009 2:20 pm
Location: England
Contact:

HTTPS Update

Post by Williams » Mon Dec 05, 2016 4:55 pm

Hi everyone

Just a quick note to say that I've been doing a little bit of playing with the server's SSL settings, and have been able to enable HTTPS connections pretty much across the board. The main site is using a paid-for cert that I installed a while ago to ensure that the mail servers and admin functions are secured, but I'm now also using WHM's AutoSSL to generate SSL certificates for all of our subdomains. They may not be quite as good as the paid certificate, but they should serve our purposes, and my browser hasn't been complaining about any of them yet.

For now, I've left the server settings so that you can choose http or https - just change the prefix at the start of the URL. Once I've confirmed that there aren't any issues coming about from using HTTPS, I'll switch it to use the secure connection by default. Until I do, you may see that images are still being sent over HTTP; but once the change is made they should go over a secure connection as well.

The main impetus for me doing this now is that from January Apple will be enforcing HTTPS connections on all of the apps in its app store - so the forums at the very least needed to be updated so that the Tapatalk plugin we have installed keeps working. I've also updated the plugin itself, so those of you who use the app should now have the options for things like Push notifications, which may have been lacking until now (we were a few versions behind on the API).

If anyone has any issues with using the sites over https, or with using the Tapatalk app after the update, let me know and I'll see if I can fix it.

User avatar
Williams
Admin
Admin
Posts: 824
Joined: Fri Oct 09, 2009 2:20 pm
Location: England
Contact:

Re: HTTPS Update

Post by Williams » Mon Dec 05, 2016 5:22 pm

As a side note, I've just noticed on the Highlander site that the Admin CP and Crew Manifest don't load on a secure connection. I imagine this would be solved by forcing http connections to redirect to https, but I'd like to get it working independently if I can all the same. Be aware of this if you want to test your own sim sites over https in the meantime.

User avatar
Williams
Admin
Admin
Posts: 824
Joined: Fri Oct 09, 2009 2:20 pm
Location: England
Contact:

Re: HTTPS Update

Post by Williams » Tue Dec 06, 2016 1:13 am

OK, the admin CP/crew manifest issue (which also affected tabs just showing as a list) has been tracked down. I've reported the issue to Anodyne, so hopefully an official fix will come from there shortly, but for those of you eager to use https on your sim sites on the PF server, here's what you need to do:

In your FTP, go to /nova/modules/assets. There will be four files to modify:
include_head_admin.php
include_head_login.php
include_head_main.php
include_head_wiki.php

You need to find the following line:

Code: Select all

<script type="text/javascript" src="http://code.jquery.com/jquery-1.8.2.min.js"></script>
And replace it with the following in all four files:

Code: Select all

<script type="text/javascript" src="//code.jquery.com/jquery-1.8.2.min.js"></script>
Save and upload the files and you're good to go. This will tell your browser to use https when getting that script from the jquery site if you're on https, but still use http otherwise. Apparently the server didn't like trying to obtain a Javascript file over a non-secure connection when the site is being loaded securely.


EDIT: The above only applies if you're on an older version of Nova (the Highlander is currently on 2.3.0). From 2.3.2 onwards, those changes are in the default Nova codebase. Unless you have modifications that are incompatible with later versions of Nova (the Hi has a couple which I need to figure out new ways around for), then the better solution would be to upgrade your Nova install to the latest version - I can help with that if you're unsure of what to do.

Post Reply

Return to “Website Helpdesk”