HTTPS questions

[attroll]

I am a little confused about the HTTPS info. Could someone please answer these questions?


Question #1
It says that “You can host your application outside your vBulletin Forum”
Does this mean that I can host it in /home/mysite/public_html/facebook/?


Question #2
It says that I will have to purchase a purchase and configure an SSL certificate.
It also says I do not have to put your entire website behind HTTPS protocol – instead, you can acquire and/or configure HTTPS hosting elsewhere for a hassle-free installation.
Does this mean I can purchase a SSL certificate and have it for the same site as my VB site and have it only work on /home/mysite/public_html/facebook/?

[Wayne Luke]

#1) Yes.

#2) Yes, your host would be able to configure that. However even if it is for your whole site you should still be able to access your forums under http.

[attroll]

So if I set up the whole site with a HTTPS Certificate I will still be able to access with HTTP?

I don't want the warning coming up like it does over at VB.org.
I know VB.org now is set up with HTTPS access and I don't want that for my forums like they have, I hate that.

[Wayne Luke]

Yes, they don't replace each other. They work in accordance with each other. Not sure why you're getting an error at vBulletin.org though. I never do.

[attroll]

The screen I get when I go to VB.org is a screen with a red background and says the following below. I do not want this coming up when ever someone types the http url to get to my site.

This is probably not the site you are looking for!
You attempted to reach www.vbulletin.org, but instead you actually reached a server identifying itself as*.vbulletin.com. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version ofwww.vbulletin.org. You should not proceed.

[Proceed Anyway] [Back to Safety]

[Wayne Luke]

The screen I get when I go to VB.org is a screen with a red background and says the following below. I do not want this coming up when ever someone types the http url to get to my site.

That is something coming from your browser. Anyway, you visitors will not need to access your site via HTTPS if your hosting company is halfway qualified to call themselves that.

[Wayne Luke]

Maybe this will help you: http://en.wikipedia.org/wiki/HTTP_Secure

[attroll]

Thank you Wayne.

Once last question

What do you recommend;
Should I set the whole site up as a HTTPS or just that directory?

[Wayne Luke]

To soothe your concerns, just that directory.

[Hansi]

Actually, you would probably SSL-enable the entire site/domain.

But you only NEED to USE it with the vbulletin facebook application.

The link used to access the information decide if SSL is used or not.

http:// for normal unencrypted connection, https:// for ssl encrypted connection.

You can try to access my forum as an example

http://forum.psxcare.com/support/forum.php <== normal
https://forum.psxcare.com/support/forum.php <== SSL

You should not receive any errors with either link.

[rolfw]

Having a problem with the https warning on browser when accessing my app and also the vBulletin app, the https starts off green, but then has a padlock yellow warning

[B]The site uses SSL, but Google Chrome has detected insecure content on the page.[/B][FONT=Arial] Be careful if you’re entering sensitive information on this page. Insecure content can provide a loophole for someone to change the look of the page.[/FONT]

That in itself is not too bad, unless the viewer has their browser security set at high, but I have several friends with iphones and ipads using the facebook app and they simply will not load the vbulletin and TVBforum app pages. https://apps.facebook.com/tvbforum/

[Wayne Luke]

Is all the content like your logo being accessed via https? This means you have to enter the https URL into the Facebook Publisher. Everything should be done with the HTTPS URL.

This app https://apps.facebook.com/tvbforum/ loads just fine on my iPad.

[rolfw]

It loads fine on my Android phone via the facebook app, although does come up with the ssl warning, as it does on my Chrome browser on my PC, but doesn't on at least two iphones and an ipad via the Facebook app (not using a browser). I am concerned about the warning message on the browser, as it could put people off.

The logo was uploaded via the app building process. My point is that the vbulletincom app has the same problem.

[Hansi]

If you look at my posts the last few days, or in the tracker, you will see how I solved this for my site...

As I see it, it is a bug in the scripts. At least my site stopped giving ssl warnings after I edited the scripts and changed a "http://" to a "https://"

I guess Wayne have not had the time to scan the forums since the weekend as I posted this friday-saturday or so.

And YES, vbulletincom has the same problem.

Look at https://apps.facebook.com/psxcare and you will probably find the only installation that does not give ssl warnings...

[rolfw]

Thanks Hansi, tried yours and it doesn't give the warning, it did however take four or five attempts to load and I had to agree to the app conditions twice before it would complete, this was on Chrome. Something strange on it, it would start to load, then fail, then start again etc. Just tried it on Rockmelt with another Facebook account and it loaded first time, but took quite a while.

In the config file all URLs are https, which other files did you change?