Posts: 3
Threads: 1
Joined: Jan 2021
2021-01-29, 07:06:46
(This post was last modified: 2021-01-29, 08:54:45 by c-base.)
First, I appreciate the work you and the other volunteers have put into this project. Thank you for this.
Is there any way to access the [edit: get-simple.info] website over HTTPS?
I was hoping to see a SSL certificate when downloading GetSimple, to limit the chance of somebody tampering the .zip file & hack my website even before it is online..
What help would you need to get a Let's Encrypt SSL certificate implemented [edit: on get-simple.info ]?
Kind regards,
c-base
Posts: 44
Threads: 8
Joined: May 2014
There are two steps:
1. edit the .htaccess file:
Code:
# Rewrite to HTTPS #
RewriteCond% {HTTP: X-Forwarded-Proto}! Https
RewriteCond% {HTTPS} off
RewriteRule ^ https: //% {HTTP_HOST}% {REQUEST_URI} [L, R = 301]
# End Rewrite to HTTPS #
2. Log in, and under the
Website url settings add
https:// instead of http://
Posts: 3
Threads: 1
Joined: Jan 2021
2021-01-29, 08:52:15
(This post was last modified: 2021-01-29, 08:52:45 by c-base.)
(2021-01-29, 08:31:58)smdp-1971 Wrote: 1. edit the .htaccess file:
I seem to have no access to the .htaccess file on the webserver get-simple.info domain name.
Further, I am not aware that I have SSH access to the hosting server for the get-simple.info domain website server.
/sarcasm mode off
I hope you won't feel offended if I kindly request you to take a little more time to read my first question, before posting an answer to a question that I didn't ask?
Posts: 515
Threads: 21
Joined: Feb 2019
It would actually be a good idea to start using checksums
to download GS
Posts: 3,491
Threads: 106
Joined: Mar 2010
Posts: 44
Threads: 8
Joined: May 2014
(2021-01-29, 08:52:15)c-base Wrote: I seem to have no access to the .htaccess file on the webserver get-simple.info domain name.
Further, I am not aware that I have SSH access to the hosting server for the get-simple.info domain website server.
/sarcasm mode off
I hope you won't feel offended if I kindly request you to take a little more time to read my first question, before posting an answer to a question that I didn't ask?
ah, yes I'm sorry, I didn't read your question carefully.
Posts: 3
Threads: 1
Joined: Jan 2021
(2021-01-29, 17:34:52)Felix Wrote: It would actually be a good idea to start using checksums
to download GS
That would be a great idea, but the checksums come from the same non-SSL http server, it would still not be secure (as the checksums would be tampered with as well).
Carlos: Thanks for the GitHub link! That's secure enough for me.
Can I perhaps contribute to GetSimple, by helping the right people with installing a free SSL certificate on the get-simple.info-website with the current webhoster (Media Temple), together with instructions on how to renew it so they can maintain it?
Posts: 515
Threads: 21
Joined: Feb 2019
Quote:Can I perhaps contribute to GetSimple, by helping the right people with installing a free SSL certificate on the get-simple.info-website with the current webhoster (Media Temple), together with instructions on how to renew it so they can maintain it?
Please contact Shawn about it