How correct redirect access that are causing Let's Encrypt to not secure my forum?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • HugoRoger
    Member
    • Nov 2012
    • 73

    How correct redirect access that are causing Let's Encrypt to not secure my forum?

    Hi everyone!

    I have successfully installed Let's Encrypt SSL certificates on my server after going though some issues.

    You can view my issues being treated by their awesome team in there official site:https://community.letsencrypt.org/t/...or-alias/26136

    Problem is that my website, which is a vBulletin Forum due to some issue is not applying the security to it!

    Here is what I was told:
    The "problem" here is that you have a redirect/rewrite rule redirecting https to http, pay attention to below output from your server, you will see a Location header redirecting





    https://www.iforumelite.com to http://www.iforumelite.com/forum.php...f927f5d848aa88
    He mentioned:
    Note: The redirect/rewrite rule could be in your apache conf, on .htaccess files used by your site or even the forum that you are using could be redirecting it.





    I checked all of it and found nothing. Here is my .htaccess file for the site in question:


    Code:
    RewriteEngine on
    RewriteCond %{SERVER_PORT} 80
    RewriteRule ^(.*)$ https://www.iforumelite.com/$1 [R=301,L]
    
    # If you are having problems or are using VirtualDocumentRoot, uncomment this line and set it to your vBulletin directory.
    # RewriteBase /forum/
    
    # If you are having problems with the rewrite from content/ to content.php, uncomment this line to turn MultiViews off.
    # Options -MultiViews
    
    RewriteCond %{REQUEST_FILENAME} -f [OR]
    RewriteCond %{REQUEST_FILENAME} -l [OR]
    RewriteCond %{REQUEST_FILENAME} -d
    
    RewriteRule ^.*$ - [NC,L]
    
    # Forum
    RewriteRule ^threads/.* showthread.php [QSA]
    RewriteRule ^forums/.* forumdisplay.php [QSA]
    RewriteRule ^members/.* member.php [QSA]
    RewriteRule ^blogs/.* blog.php [QSA]
    RewriteRule ^entries/.* entry.php [QSA]
    
    RewriteCond %{REQUEST_FILENAME} -f [OR]
    RewriteCond %{REQUEST_FILENAME} -l [OR]
    RewriteCond %{REQUEST_FILENAME} -d
    
    RewriteRule ^.*$ - [NC,L]
    
    # MVC
    RewriteRule ^(?:(.*?)(?:/|$))(.*|$)$ $1.php?r=$2 [QSA]
    
    # Check MVC result
    RewriteCond %{REQUEST_FILENAME} -f
    RewriteRule ^(.*)$ - [NC,L]
    RewriteRule ^(.*)$ - [R=404,L]
    
    # Set PHP handler to application/x-httpd-php on Fri Nov 13 19:59:33 MST 2015.
    #AddHandler application/x-httpd-php .php



    Someone suggested that I:
    "I suspect you have not informed your CMS of the URL change, since most content management systems use PHP redirects from a set base URL normally set in the database or a config file. Login to your dashboard and check your settings within and perhaps the config file that is used to connect to the database."

    I went to the vbulletin account dashboard and there is no option to enter a https version only http.

    The current setting I have there is this:



    Can I change it to this and it will fix it: Click image for larger version  Name:	vbbbbbbbb.PNG Views:	1 Size:	3.7 KB ID:	4363554




    The same thing is happening to clashforum.com.br

    If I simply type it out in the browser www.iforumelite.com it will land in a none-secure page. This is so frustrating.


    I have the rewrite on my .htaccess file:

    RewriteCond %{SERVER_PORT} 80
    RewriteRule ^(.*)$ https://www.iforumelite.com/$1 [R=301,L]

    I configured the site name and configuration.

    Some pages still appear as HTTPS secure while other partially:

    Example:

    https://www.iforumelite.com/content....e-contratacoes

    Loads with https but shows not secure

    Shows fine with https like most:



    but then: https://www.iforumelite.com/content.php is not secure.. Any help!
    Last edited by HugoRoger; Sat 28 Jan '17, 2:38pm.
    Trying to make a living while helping others! www.beingled.com
  • HugoRoger
    Member
    • Nov 2012
    • 73

    #2
    Any help on this? I mean I've read everywhere... And Ive read this too:
    https://www.vbulletin.com/forum/arti...forum-to-https
    But it does not work fix anything.. i already did all steps in there as you can all see.. I don't know what other details to include in order to get help.
    Last edited by HugoRoger; Thu 2 Feb '17, 12:03pm.
    Trying to make a living while helping others! www.beingled.com

    Comment

    • HugoRoger
      Member
      • Nov 2012
      • 73

      #3
      Any other documentation I should read? your tutorial for securing vbulletin is not work.
      Trying to make a living while helping others! www.beingled.com

      Comment

      • Mark.B
        vBulletin Support
        • Feb 2004
        • 24286
        • 6.0.X

        #4
        The tutorial works fine. What you're getting is mixed content warnings due to embedded images that are not using http.

        In the case of the page you linked to, this is actually vBulletin attachments.

        Mixed Content: The page at 'https://www.iforumelite.com/content.php' was loaded over HTTPS, but requested an insecure image 'http://www.iforumelite.com/attachment.php?attachmentid=15&stc=1&stc=1'. This content should also be served over HTTPS.
        content.php:548 Mixed Content: The page at 'https://www.iforumelite.com/content.php' was loaded over HTTPS, but requested an insecure image 'http://www.iforumelite.com/attachment.php?attachmentid=14&stc=1&stc=1'. This content should also be served over HTTPS.


        So, you've got attachments there that haven't picked up the https change. Presumably you have changed the site URL in the admincp?
        Assuming you have, it's probably the CMS cache.
        Go to AdminCP > Maintenance > Clear System Cache.
        Then try the page again.

        It's also worth rebuilding the post cache:
        AdminCP > Maintenance > General Update Tools > Rebuild Post Cache

        The URLs entered in the members area on this site have no bearing on the functionality of your forum, we ask for them only for license verification purposes.
        MARK.B
        vBulletin Support
        ------------
        My Unofficial vBulletin 6.0.0 Demo: https://www.talknewsuk.com
        My Unofficial vBulletin Cloud Demo: https://www.adminammo.com

        Comment

        • HugoRoger
          Member
          • Nov 2012
          • 73

          #5
          Thanks Mark!

          Yes, I have those settings configured in my admincp.

          I did a clear system cache and it fixed for one of the URLs but this one still does not work:



          In my forum settings I have:


          Forum URL: https://www.iforumelite.com
          Always use Forum URL as Base Path: Set to > No
          Forum Component URL: https://www.iforumelite.com
          CMS Component URL: Is blank
          BLog Component URL: Is blank
          Redirect Domain Whitelist: I added https://www.iforumelite.com in the white box.
          Disable Redirect Domain Checking: I have set it to > : No
          Homepage URL: https://www.iforumelite.com


          Strange thing is when I go to: https://www.iforumelite.com/content.php I see the lock and then a quick redirect and the secure lock is removed.
          Trying to make a living while helping others! www.beingled.com

          Comment

          • Mark.B
            vBulletin Support
            • Feb 2004
            • 24286
            • 6.0.X

            #6
            The images on that page or being cached somehow.

            Are you running any add-ons?


            MARK.B
            vBulletin Support
            ------------
            My Unofficial vBulletin 6.0.0 Demo: https://www.talknewsuk.com
            My Unofficial vBulletin Cloud Demo: https://www.adminammo.com

            Comment

            • HugoRoger
              Member
              • Nov 2012
              • 73

              #7
              When you mentioned.. I had this installed: http://www.vbulletin.org/forum/showthread.php?t=288060

              IMG Cacher - SSL Keeper - Mixed Content Block Solution


              So I removed it, rebuilt styles, cleared system cache but still dit not work..

              these are the only plug ins I can see:
              Trying to make a living while helping others! www.beingled.com

              Comment

              • man1c
                Senior Member
                • Apr 2005
                • 134
                • 3.8.x

                #8
                Have you tried adding a replacement variable to your style?

                Comment

                • HugoRoger
                  Member
                  • Nov 2012
                  • 73

                  #9
                  Thanks Man1c! Will try that and let you guys know.
                  Trying to make a living while helping others! www.beingled.com

                  Comment

                  • HugoRoger
                    Member
                    • Nov 2012
                    • 73

                    #10
                    Originally posted by man1c
                    Have you tried adding a replacement variable to your style?
                    I guess this was it! ran a few variations and it worked!!

                    Can you confirm if you see it secure on your end as well? Just being paranoid.

                    Trying to make a living while helping others! www.beingled.com

                    Comment

                    • man1c
                      Senior Member
                      • Apr 2005
                      • 134
                      • 3.8.x

                      #11
                      I've just looked at your site and all seems to be working fine

                      Comment

                      • HugoRoger
                        Member
                        • Nov 2012
                        • 73

                        #12
                        Thanks a bunch!!!!! And as usual.. thank you as well Mark.B !
                        Trying to make a living while helping others! www.beingled.com

                        Comment

                        Related Topics

                        Collapse

                        Working...