http://citycyclingedinburgh.info/bbpress/ CityCyclingEdinburgh Forum » Topic: https cert for this site? en Tue, 26 May 2026 10:04:23 +0000 http://citycyclingedinburgh.info/bbpress/topic.php?id=19172#post-293069 Sun, 07 Oct 2018 21:28:49 +0000 davecykl 293069@http://citycyclingedinburgh.info/bbpress/ <p>Thanks chrisfl, good to know that it is on the todo list (less good to know that it sounds a more complicated process to implement than I had naively thought!). Have, umm, fun with your solution to get things upgraded! </p> http://citycyclingedinburgh.info/bbpress/topic.php?id=19172#post-293043 Sat, 06 Oct 2018 23:44:57 +0000 chrisfl 293043@http://citycyclingedinburgh.info/bbpress/ <p>Hi davecykl - thanks for the suggestion. This is on my todo list and I expect to make it live fairly shortly. </p> <p>[techie bit]<br /> For those technically minded, The reason that this is more complicated than you might expect, is that the current site is served by a caching frontend using Varnish that then passes the requests back to Apache, but Varnish doen't support using https. </p> <p>An additional problem is that the code only runs on php 5.3 and is totally broken on php 7. So in order to have this play nicely I'm moving to a Ngrix frontend with the php executed by fpm which allows different sites to be on different php versions.</p> <p>The new setup is all configured by ansible and I have a test site up and running, the main niggle is that somewhere something keeps redirecting links back to the http version.<br /> [/techie bit] </p> http://citycyclingedinburgh.info/bbpress/topic.php?id=19172#post-293005 Sat, 06 Oct 2018 14:17:08 +0000 davecykl 293005@http://citycyclingedinburgh.info/bbpress/ <p>Are there plans to add an https security certificate to this site? </p> <p>We all know that sending information over the net unencrypted is not desirable, as it can be intercepted and changed en route (and I would hope that nobody is using the same email/username/password here as on any other sites, as it potentially puts those logins at risk as well). As well, some web browsers are starting to show security alerts for unencrypted websites, and some search engines are starting to downrank them in search results.</p> <p><a href="https://letsencrypt.org/">LetsEncrypt certs</a> are completely free, and, as I found out, are actually fairly simple to set up using the <a href="https://github.com/lukas2511/dehydrated">dehydrated helper script</a>.</p> <p>I'm happy to help, if need be. </p>