Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Missing HTTPS/SSL certificate for Get-simple.info, Letsencrypt?
#1
First, I appreciate the work you and the other volunteers have put into this project. Thank you for this.

Is there any way to access the [edit: get-simple.info] website over HTTPS?
I was hoping to see a SSL certificate when downloading GetSimple, to limit the chance of somebody tampering the .zip file & hack my website even before it is online..

What help would you need to get a Let's Encrypt SSL certificate implemented [edit: on get-simple.info ]?

Kind regards,
c-base
Reply
#2
There are two steps:

1. edit the .htaccess file:
Code:
# Rewrite to HTTPS #
RewriteCond% {HTTP: X-Forwarded-Proto}! Https
RewriteCond% {HTTPS} off
RewriteRule ^ https: //% {HTTP_HOST}% {REQUEST_URI} [L, R = 301]
# End Rewrite to HTTPS #

2. Log in, and under the Website url settings add https:// instead of http://
Reply
#3
(2021-01-29, 08:31:58)smdp-1971 Wrote: 1. edit the .htaccess file:

I seem to have no access to the .htaccess file on the webserver get-simple.info domain name.
Further, I am not aware that I have SSH access to the hosting server for the get-simple.info domain website server.
/sarcasm mode off

I hope you won't feel offended if I kindly request you to take a little more time to read my first question, before posting an answer to a question that I didn't ask?
Reply
#4
It would actually be a good idea to start using checksums
to download GS
Reply
#5
@c-base

You can also download it here: https://github.com/GetSimpleCMS/GetSimpleCMS/releases
Reply
#6
(2021-01-29, 08:52:15)c-base Wrote: I seem to have no access to the .htaccess file on the webserver get-simple.info domain name.
Further, I am not aware that I have SSH access to the hosting server for the get-simple.info domain website server.
/sarcasm mode off

I hope you won't feel offended if I kindly request you to take a little more time to read my first question, before posting an answer to a question that I didn't ask?

ah, yes I'm sorry, I didn't read your question carefully.
Reply
#7
(2021-01-29, 17:34:52)Felix Wrote: It would actually be a good idea to start using checksums
to download GS

That would be a great idea, but the checksums come from the same non-SSL http server, it would still not be secure (as the checksums would be tampered with as well).

Carlos: Thanks for the GitHub link! That's secure enough for me.


Can I perhaps contribute to GetSimple, by helping the right people with installing a free SSL certificate on the get-simple.info-website with the current webhoster (Media Temple), together with instructions on how to renew it so they can maintain it?
Reply
#8
agree with you. i use free ssl too
Reply
#9
Quote:Can I perhaps contribute to GetSimple, by helping the right people with installing a free SSL certificate on the get-simple.info-website with the current webhoster (Media Temple), together with instructions on how to renew it so they can maintain it?

Please contact Shawn about it
Reply




Users browsing this thread: 1 Guest(s)