glFusion Wiki

Site Tools


glfusion:ssl

Changing an Existing Site to SSL

Recently, Google announced that it has started considering HTTPS as a metric when deciding the pagerank of a given website. Thus, all other elements being equal, HTTPS websites get preference over HTTP ones. Whether this is a good thing or not, I don't know. Regardless, if you choose to migrate your glFusion site over to SSL, here is a quick tutorial to help get it.

Overview

There are several configuration settings that need to be updated when moving a site from non-SSL to SSL:

Site → Site Tab
  • Site URL
  • Site Admin URL
  • Site Disabled Message or URL
Miscellaneous → Cookie Tab
  • Secure Cookie Setting (Set to True)
Images → Photo Tab
  • Default Photo - Modify the URL to use https://
FileMgmt → FileMgmt General Settings Tab
  • URL to Files
  • URL to File Thumbnails
  • URL to Category Thumbnails
Forum → Attachment Settings Tab
  • DownloadURL
DokuWiki → Securecookie
If you have the DokuWiki plugin installed - go into Command & Control → DokuWiki and make sure the secure cookie setting is checked.

If you do not change these settings after converting the web server to use SSL, you may have difficulties accessing your site, or logging into your site.

How to Make the Change

You will need to purchase an SSL certificate for your site, or use the Let's Encrypt service which is free. If your hosting provider supports Let's Encrypt, it is a great way to use SSL without any additional cost.

Step 1

Get the SSL certificate installed and configured on your server so the site is now accessible via SSL. You may need to contact your hosting provider or system administrator for assistance with this.

Step 2

Update your glFusion Configuration. There are 2 ways we can update the configuration. If the site is still accessible without SSL, you can simply log in and change the 8 configuration settings above.

Site URLs

Navigate to the Site Section - Site Tab - change the Site URL and Site Admin URL to be https: instead of http:. Save the settings.

Navigate to the Miscellaneous Section - Cookies Tab - change the Cookie Secure setting to True. Save the settings.

Navigate to the FileMgmt Section - FileMgmt General Settings Tab - change the URL to Files and URL to File Thumbnails and URL to Category Thumbnails to be https: instead of http:. Save the settings.

Navigate to the Forum Section - Attachment Settings Tab - change the DownloadURL to be https: instead of http:. Save the settings.

Updating the Site Settings with fusionrescue

If the site is only accessible by SSL, you may need to use the fusionrescue utility to update the configuration.

Step 3

Check your menubuilder and content for http:// links. Menu Builder should handle standard links but if you manually entered your own url for any custom links, it should be changed to "%site_url%" to track the configured site url.

Step 4

Set up the non-SSL to SSL redirect. Once you've made the change to SSL, you want to setup the web server to automatically redirect non-SSL requests to the SSL. Generally, this can be done using the .htaccess file. Here is the .htaccess rule we use here to redirect non-SSL requests to SSL. Be sure to change the URL to use your site URL.

  RewriteEngine On
  RewriteCond %{HTTPS} off
  RewriteCond %{HTTP_HOST} www\.glfusion\.org$
  RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

If you use a different web server, please reach out to your hosting provider's tech support or your system administrator for details on how to redirect using your specific web server.

glfusion/ssl.txt · Last modified: 2017/09/27 11:11 (external edit)

Page Tools