GetSimple Support Forum

Full Version: Missing HTTPS/SSL certificate for Get-simple.info, Letsencrypt?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
First, I appreciate the work you and the other volunteers have put into this project. Thank you for this.

Is there any way to access the [edit: get-simple.info] website over HTTPS?
I was hoping to see a SSL certificate when downloading GetSimple, to limit the chance of somebody tampering the .zip file & hack my website even before it is online..

What help would you need to get a Let's Encrypt SSL certificate implemented [edit: on get-simple.info ]?

Kind regards,
c-base
There are two steps:

1. edit the .htaccess file:
Code:
# Rewrite to HTTPS #
RewriteCond% {HTTP: X-Forwarded-Proto}! Https
RewriteCond% {HTTPS} off
RewriteRule ^ https: //% {HTTP_HOST}% {REQUEST_URI} [L, R = 301]
# End Rewrite to HTTPS #

2. Log in, and under the Website url settings add https:// instead of http://
(2021-01-29, 08:31:58)smdp-1971 Wrote: [ -> ]1. edit the .htaccess file:

I seem to have no access to the .htaccess file on the webserver get-simple.info domain name.
Further, I am not aware that I have SSH access to the hosting server for the get-simple.info domain website server.
/sarcasm mode off

I hope you won't feel offended if I kindly request you to take a little more time to read my first question, before posting an answer to a question that I didn't ask?
It would actually be a good idea to start using checksums
to download GS
@c-base

You can also download it here: https://github.com/GetSimpleCMS/GetSimpleCMS/releases
(2021-01-29, 08:52:15)c-base Wrote: [ -> ]I seem to have no access to the .htaccess file on the webserver get-simple.info domain name.
Further, I am not aware that I have SSH access to the hosting server for the get-simple.info domain website server.
/sarcasm mode off

I hope you won't feel offended if I kindly request you to take a little more time to read my first question, before posting an answer to a question that I didn't ask?

ah, yes I'm sorry, I didn't read your question carefully.
(2021-01-29, 17:34:52)Felix Wrote: [ -> ]It would actually be a good idea to start using checksums
to download GS

That would be a great idea, but the checksums come from the same non-SSL http server, it would still not be secure (as the checksums would be tampered with as well).

Carlos: Thanks for the GitHub link! That's secure enough for me.


Can I perhaps contribute to GetSimple, by helping the right people with installing a free SSL certificate on the get-simple.info-website with the current webhoster (Media Temple), together with instructions on how to renew it so they can maintain it?
Quote:Can I perhaps contribute to GetSimple, by helping the right people with installing a free SSL certificate on the get-simple.info-website with the current webhoster (Media Temple), together with instructions on how to renew it so they can maintain it?

Please contact Shawn about it