Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 09 Jun 2016, 14:17
ronnyship ronnyship is offline
 
Join Date: Apr 2007
Lightbulb Want to implement SSL - https

Anyone with good knowledge on the how to fix implementation of an SSL certificate in order to get https:// ? Am running version of 4.2.3, and approx 500.000 post sized board.

My webhotell offers various kinds of certificates and they do the implementation on the domain.

- Will speed be noticable affected?
- Will a 301 permanent redirect from http:// to https:// be sufficient, or do I need to update https:// elsewhere besides in the "Site name / URL / Contact details"?
- Will all posts containing images/videos etc from external sites make things bad with https:// (i.e. show as "this page is unsafe" for the user? If so, a SSL/https will become a negative aspect for our readers.

Assume Google would need to get to know me as we never were friends, but that is ok. Really appreciate some comments on this.

Edit: Have now converted from http to https:. Seems to be quite easy and now it will be interesting to see how Google views this over time. No hick-ups after changing protocol.

Last edited by ronnyship; 11 Jun 2016 at 10:59.
Reply With Quote
  #2  
Old 15 Aug 2016, 23:46
jamoss's Avatar
jamoss jamoss is offline
 
Join Date: Apr 2002
Real name: Jennifer
I am planning on this too - right now if I use https:// none of the css renders. Can you list the steps you took to implement SSL?

Thanks!
Jennifer
__________________
Jennifer M. - php developer since '98
Reply With Quote
  #3  
Old 15 Aug 2016, 23:58
Dave Dave is offline
 
Join Date: Jun 2010
Real name: Dave
1. Implement and install the SSL certificate.
2. Change the vBulletin URL's in the settings.
3. Apply appropriate rewrite rules to redirect HTTP to HTTPS, 301 if you plan on using it forever.
4. Install one of the available image proxy plugins so images from a third party hosting provider are proxified through HTTPS.
5. Change any embedding BBCode you have to use the HTTPS scheme.
6. If some of JS/CSS files of vBulletin still load over HTTP, apply some modifications to the templates to forcefully load those over HTTPS.

That's what I had to do to make HTTPS work on my forum.
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com

Contact me for custom vBulletin 3/4 work & server/website management.

Last edited by Dave; 16 Aug 2016 at 01:47.
Reply With Quote
  #4  
Old 16 Aug 2016, 00:28
jamoss's Avatar
jamoss jamoss is offline
 
Join Date: Apr 2002
Real name: Jennifer
Thank you, that's very helpful.
__________________
Jennifer M. - php developer since '98
Reply With Quote
  #5  
Old 16 Aug 2016, 07:55
IggyP IggyP is offline
 
Join Date: May 2012
Originally Posted by Dave View Post
1. Implement and install the SSL certificate.
2. Change the vBulletin URL's in the settings.
3. Apply appropriate rewrite rules to redirect HTTP to HTTPS, 301 if you plan on using it forever.
4. Install one of the available image proxy plugins so images from a third party hosting provider are proxified through HTTPS.
5. Change any embedding BBCode you have to use the HTTPS scheme.
6. If some of JS/CSS files of vBulletin still load over HTTP, apply some modifications to the templates to forcefully load those over HTTPS.

That's what I had to do to make HTTPS work on my forum.
can you share any links for #4 please?

im not familiar..
working on a vb4 project will be making transition to https eventually tho..

thanks
Reply With Quote
  #6  
Old 16 Aug 2016, 14:56
Dave Dave is offline
 
Join Date: Jun 2010
Real name: Dave
Originally Posted by IggyP View Post
can you share any links for #4 please?

im not familiar..
working on a vb4 project will be making transition to https eventually tho..

thanks
http://www.vbulletin.org/forum/showthread.php?t=288060
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com

Contact me for custom vBulletin 3/4 work & server/website management.
Reply With Quote
  #7  
Old 17 Aug 2016, 05:21
jamoss's Avatar
jamoss jamoss is offline
 
Join Date: Apr 2002
Real name: Jennifer
Lightbulb

I also found that you have to regenerate the stylesheets - or they'll still be referencing http:// images:

0. Make sure you've changed the URL of your FORUM and URL of your HOMEPAGE in General Settings: Site Name / URL / Contact Details

1. Maintenance
2. General Update Tools
3. Rebuild Styles
__________________
Jennifer M. - php developer since '98
Reply With Quote
  #8  
Old 08 Oct 2016, 14:04
scottkoz20 scottkoz20 is offline
 
Join Date: Jan 2016
Real name: Scott
marking this as I am planning an SSL certificate for my site this week
Reply With Quote
  #9  
Old 05 Nov 2016, 10:01
jagtpf jagtpf is offline
 
Join Date: Mar 2015
Real name: Geoff
Thank you for this . 'tis a thought in progress for our Forum . Shame vbulletin don't provide some guide on how to implement ssl/https .

Is there a full help guide anywhere - pitfalls along the way ....
Reply With Quote
  #10  
Old 23 Jan 2017, 07:42
Kolbi's Avatar
Kolbi Kolbi is offline
 
Join Date: Mar 2009
Real name: Matthias
Is there a solution in combination with CDN?
Reply With Quote
  #11  
Old 23 Jan 2017, 08:44
Stratis's Avatar
Stratis Stratis is offline
 
Join Date: Jan 2010
Real name: Stratis
Originally Posted by Dave View Post
3. Apply appropriate rewrite rules to redirect HTTP to HTTPS, 301 if you plan on using it forever.

A little help with this, i have sitemap listed in webmasters. All keywords(links) are ok with https, but what happens with http links, i see them to...


Do i must delete sitemap http? and leave only https?
Do i must HTTP to HTTPS, 301redirect , where?


I have this in .htaccess?
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]


Thanks

EDIT:
delete sitemap http

Last edited by Stratis; 17 Feb 2017 at 10:49.
Reply With Quote
Reply

Similar Threads
Thread Thread Starter Forum Replies Last Post
Miscellaneous Hacks AWCoding- Restrict SSL (https) AWJunkies vBulletin 4.x Add-ons 10 20 Jul 2013 18:56
Miscellaneous Hacks AWCoding- Restrict SSL (https) AWJunkies vBulletin 3.8 Add-ons 4 07 Dec 2011 02:33
Miscellaneous Hacks AWCoding- Restrict SSL (https) AWJunkies vBulletin 3.7 Add-ons 5 08 Mar 2011 18:28



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 13:50.

Layout Options | Width: Wide Color: