Changes between Version 21 and Version 22 of faq/security/setup-certificate
- Timestamp:
- Jul 25, 2018, 6:56:37 PM (7 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
faq/security/setup-certificate
v21 v22 6 6 By default, your web site does not communicate with the world using an encrypted connection. When you connect, it uses the "http" protocol instead of the "https" protocol. 7 7 8 We strongly encourage all members to change this setting so all communications is encrypted. Even if you don't think it is necessary, consider that all information you send to the site, which may include usernames and passwords, are sent in the clear unless you are using https. 8 We strongly encourage all members to change this setting so all communications is encrypted. Even if you don't think it is necessary, consider that all information you send to the site, which may include usernames and passwords, are sent in the clear unless you are using https. 9 9 10 10 Fortunately, the process of choosing to run an https enabled web site is fully handled in the members control panel: … … 12 12 * Log in via https://members.mayfirst.org/cp. 13 13 * Choose the "Web Configuration" section. 14 * Remove any domains from ServerAlias or ServerName that are a sub-domain of mayfirst.org (e.g. yourorg.mayfirst.org). You should only have your own personal domains listed (this is temporary until #12045 is resolved). 14 * Edit your web configuration and remove any domains from ServerAlias or ServerName that are a sub-domain of mayfirst.org (e.g. yourorg.mayfirst.org). You should only have your own personal domains listed (this is temporary until #12045 is resolved). 15 * Be sure that the DNS entries for any domains entered as ServerName or ServerAlias actually resolve to the ip number of your website host. 15 16 * Edit your web configuration and change the "Port" field to "auto". 16 17 * Click "Submit". … … 47 48 48 49 Then, edit the https site, remove the SSL lines, and change it to auto. 50 51 52 == Do I need to make any additional changes to my website internal configuration? == 53 54 This depends on how your website has been created. For WordPress sites it is necessary to [https://support.mayfirst.org/wiki/how-to/wordpress/change-site-url change the siteurl] and any internal references to the http version of the site to the https version. If you are using Drupal and you have explicity set the {{{$base_url}}} variable in your {{{default/settings.php}}} file you will need to update that value, otherwise the change should be automatic. html only sites will have to have their internal URL's updated manually.
