The Glade 4.0
https://gladerebooted.net/

HTTPS enabled for the site
https://gladerebooted.net/viewtopic.php?f=2&t=11743
Page 1 of 1

Author:  Mookhow [ Thu Sep 01, 2016 7:56 pm ]
Post subject:  HTTPS enabled for the site

I turned on HTTPS for the forum, since Let's Encrypt made it so easy to do. Please let me know if you have any issues.

Author:  Müs [ Fri Sep 02, 2016 1:07 am ]
Post subject: 

Getting Google Chrome errors about invalid certificates.

And its forcing me to login every time.

Author:  Mookhow [ Fri Sep 02, 2016 1:39 am ]
Post subject: 

I tweaked the settings a bit. Let me know if you still have either problem.

Author:  Aethien [ Fri Sep 02, 2016 5:40 pm ]
Post subject: 

None here, didn't ever notice. Looks seamless. Thanks.

Author:  Mookhow [ Fri Sep 02, 2016 6:15 pm ]
Post subject: 

I noticed that threads that involve a mixture of SSL and non-SSL content, like linked images, will cause my browser to complain about the potential security problems with that type of setup. It's not a problem, and it is an inherent trait of the forum's structure, but if you notice the little security padlock complain, that's why.

Author:  Khross [ Sat Sep 03, 2016 2:52 pm ]
Post subject:  Re: HTTPS enabled for the site

I'm having to log in every time I visit.

Author:  Screeling [ Sat Sep 03, 2016 5:32 pm ]
Post subject:  Re: HTTPS enabled for the site

Khross wrote:
I'm having to log in every time I visit.

Same. I occasionally had this problem before the change (seemed related to an IP change? not sure), but now it happens every visit.

Author:  Aethien [ Sun Sep 04, 2016 12:36 am ]
Post subject: 

I spoke too soon. I just had to log in to come here right now. Not sure if that will be the case next time, we'll see.

Author:  Mookhow [ Sun Sep 04, 2016 6:13 am ]
Post subject:  Re: HTTPS enabled for the site

On the main page, there should be a link to "Delete all board cookies". Try using that and see if the login problem stops occurring.

Author:  Khross [ Sun Sep 04, 2016 12:49 pm ]
Post subject:  Re: HTTPS enabled for the site

The "Delete All Cookies" link did not resolve the problem for me.

Author:  Mookhow [ Tue Sep 06, 2016 9:01 am ]
Post subject:  Re: HTTPS enabled for the site

What browser are you using? What url are you going to?

The problem is somewhere in the cookies getting lost, but I do not have the problem myself.

Author:  Screeling [ Tue Sep 06, 2016 2:12 pm ]
Post subject:  Re: HTTPS enabled for the site

Mookhow wrote:
What browser are you using? What url are you going to?

The problem is somewhere in the cookies getting lost, but I do not have the problem myself.

For myself, Chrome. It seems like if I go to https://www.gladerebooted.org, I don't have cookie issues. If I simply use "www.gladerebooted.org", it will not keep the login on next session.

Author:  Mookhow [ Tue Sep 06, 2016 3:19 pm ]
Post subject:  Re: HTTPS enabled for the site

Ok I'll try to work that angle tonight.

Sent from my Nexus 6P using Tapatalk

Author:  Kaffis Mark V [ Tue Sep 06, 2016 3:23 pm ]
Post subject: 

Chrome is still warning me about the certificate, as well. Otherwise, I can report that without the https, it doesn't retain my login from visit to visit as Khross indicated.

Author:  FarSky [ Tue Sep 06, 2016 3:45 pm ]
Post subject: 

Huh. I haven't had any problems or anything. Using Safari on all my devices, desktop and mobile, for troubleshooting information.

Author:  Mookhow [ Tue Sep 06, 2016 7:09 pm ]
Post subject:  Re: HTTPS enabled for the site

Ok I redid the Apache rewrite condition. Anytime you try to access www.gladerebooted.org, it should automatically move you to https://gladerebooted.org. That should hopefully fix the cookie issue.

Author:  Screeling [ Tue Sep 06, 2016 7:41 pm ]
Post subject: 

So far seems to be working.

Author:  Müs [ Mon Sep 12, 2016 6:24 pm ]
Post subject: 

Why do we need https on here?

Author:  Mookhow [ Mon Sep 12, 2016 11:10 pm ]
Post subject:  Re: HTTPS enabled for the site

1. Let's Encrypt makes it easy to set up SSL.
2. Private and secure communication is always a plus.
3. If done right, it should be practically transparent to the end user.
4. I wanted to play around with it.

Author:  Kaffis Mark V [ Tue Sep 13, 2016 12:34 pm ]
Post subject: 

5. There's talk about some major browsers shaming sites into making the move to secure communication by nagging/warning users about non-secure sites.

Author:  Darkroland [ Thu Sep 15, 2016 9:02 am ]
Post subject:  Re: HTTPS enabled for the site

6. It makes us seem all cool and mission impossible-y, as always, the secretary will disavow any knowledge of our actions.

Page 1 of 1 All times are UTC - 6 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/