Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




391 posts

Ultimate Geek
+1 received by user: 11


# 251509 28-Jun-2019 15:21
Send private message quote this post

Hi

 

I am not sure which forum to use or if you guys can help

 

I am building a website on Wordpress. its on 1st domains platform with Plesk.

 

They use Lets encrypt. SSL

 

1st domains helped me to set up that part of it in plesk and from their end the website is fine they tell me.

 

All pages of the website are https but when I view the website on firefox or IE I get a warning error or potential security risk ahead - on firefox.

 

On the website in wordpress I installed really simple SSL plugin and it appears to be working, and there are no red issues over SSL

 

In the General settings of wordpress I make sure that the wordpress address and site address are the same and have https:// in front of the domain name.

 

I don't know how to resolve it, or what is causing it, could it be a lets encrpt error, or a problem with the Really simple ssl plugin? or maybe something else.

 

I don't have issues viewing other https websites on the internet, only the website I have created.

 

I have another website I am going to install ssl on and see if I get the same issue.

 

In the meantime if anyone could suggest something would be great, thanks


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
2567 posts

Uber Geek
+1 received by user: 765

Trusted
Lifetime subscriber

  # 2266360 28-Jun-2019 15:24
Send private message quote this post

We probably need to see the error message.  Can you screen shot it?  Ideally open the certificate properties to see the error with the certificate.

 

Feel free to PM me the web site address if you don;t want to make it public, so I can have a quick look.





"4 wheels move the body.  2 wheels move the soul."

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

67 posts

Master Geek
+1 received by user: 14


  # 2266368 28-Jun-2019 15:42
3 people support this post
Send private message quote this post

We use this website for testing that our SSL certificates are configured properly:

 

https://www.ssllabs.com/ssltest/index.html


 
 
 
 


2567 posts

Uber Geek
+1 received by user: 765

Trusted
Lifetime subscriber

  # 2266380 28-Jun-2019 16:02
Send private message quote this post

nigelramsay: We use this website for testing that our SSL certificates are configured properly:

 

https://www.ssllabs.com/ssltest/index.html 

 

What a great tip, thank you.  I've not seen this before.





"4 wheels move the body.  2 wheels move the soul."

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams



391 posts

Ultimate Geek
+1 received by user: 11


  # 2266383 28-Jun-2019 16:08
Send private message quote this post

Geekzone won't let me upload any screen shot

 

Says the image must be maximum of 2Mgs but mine is only 537kb

 

 

 

I ran the SSL test and result is A inside a green box

 

Cert is 100%, protocol support about 95% key exchange and cipher strength about 90%

 

I don't know how to interpret the results

 

 

 

Firefox says its a bad cert domain error

 

 


234 posts

Master Geek
+1 received by user: 23

Lifetime subscriber

  # 2266395 28-Jun-2019 16:34
Send private message quote this post

I have seen delays in these auto SSL certs setting up. Did something similar last night. A force refresh a couple of hours later and it reported all was well.

2567 posts

Uber Geek
+1 received by user: 765

Trusted
Lifetime subscriber

  # 2266402 28-Jun-2019 16:47
Send private message quote this post

I've just had a look at the site in Chrome, Firefox, and IE, and the SSL looked fine in all three.  I navigated around the site in all three browsers as well.

 

Perhaps your computer has old certificates cached?





"4 wheels move the body.  2 wheels move the soul."

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

372 posts

Ultimate Geek
+1 received by user: 57


  # 2266411 28-Jun-2019 17:06
Send private message quote this post

pm me the url

 

ill help you out

 

all my sites are using Lets encrypt and are all rated A+ on ssl labs


 
 
 
 


42 posts

Geek
+1 received by user: 12


  # 2266447 28-Jun-2019 18:26
Send private message quote this post

whynopadlock.com is also a really useful tool to finding out why you're not showing as secure


Mr Snotty
8730 posts

Uber Geek
+1 received by user: 4635

Moderator
Trusted
Lifetime subscriber

  # 2266505 28-Jun-2019 18:53
One person supports this post
Send private message quote this post

This sounds like you're once again using old software - patched your operating system fully?





296 posts

Ultimate Geek
+1 received by user: 105


  # 2266560 28-Jun-2019 22:25
Send private message quote this post

Inspect the html source of the code or use your browser dev tools. There might be static content (css,js,images) loaded through http, so browser will complain about mixed content


BDFL - Memuneh
63890 posts

Uber Geek
+1 received by user: 14356

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2266625 29-Jun-2019 10:01
Send private message quote this post

No one mentioned mixed content. That is when your page has a done non-https elements such as images or scripts.

Make sure EVERYTHING on the page is always called using the https protocol. Make sure any add-ons are correctly configured for SSL and support SSL.







391 posts

Ultimate Geek
+1 received by user: 11


  # 2267276 30-Jun-2019 12:09
Send private message quote this post

I will try whyno padlock again

 

Thanks

 

I do have a few plugins, I will check them

 

It looks like I should be getting an A+ on the ssl labs site not just an A

 

 

 

 

 

 




391 posts

Ultimate Geek
+1 received by user: 11


  # 2267283 30-Jun-2019 12:17
Send private message quote this post

The whynopadlock finished

 

I have a X on domain matching - your ssl cert does not match your domain name

 

And I have a triangle on protocols - you have TLSv1 enabled which is being phased out.

 

Everything is listed under SSL connection errors even if there are some items ticked green

 

The mixed content section has a green tick and says I have no mixed content.

 

The issue must be the domain matching.

 

 

 

 

 

 

 

 


BDFL - Memuneh
63890 posts

Uber Geek
+1 received by user: 14356

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2267285 30-Jun-2019 12:22
One person supports this post
Send private message quote this post

Remember a certificate for example.com is not the same as a certificate for www.example.com - you'd have to have a wildcard certificate for example.com and *.example.com.







391 posts

Ultimate Geek
+1 received by user: 11


  # 2267303 30-Jun-2019 13:23
Send private message quote this post

Hi,

 

Sorry don't know what you mean or how to do that.

 

I posted a message to Lets encrypt and they suggested to add some lines of code to the htaccess file.

 

I have put in a support ticket to 1st domains.

 

I can access the htaccess file through plesk but I don't want to mess with that because I don't understand it.

 

If the issue is too complex for 1st domains I will see about trying another certificate like cloudfare or just move my hosting to another provider instead of 1st domains.

 

I don't really want to do that, because I have already paid for one years website hosting and I doubt they will give me a refund.

 

 

 

 


 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Dunedin selects Telensa to deliver smart street lighting for 15,000 LEDs
Posted 18-Jul-2019 10:21


Sprint announces a connected wallet card with built-in IoT support
Posted 18-Jul-2019 08:36


Educational tool developed at Otago makes international launch
Posted 17-Jul-2019 21:57


Symantec introduces cloud access security solution
Posted 17-Jul-2019 21:48


New Zealand government unveils new digital service to make business easier
Posted 16-Jul-2019 17:35


Scientists unveil image of quantum entanglement
Posted 13-Jul-2019 06:00


Hackers to be challenged at University of Waikato
Posted 12-Jul-2019 21:34


OPPO Reno Z now available in New Zealand
Posted 12-Jul-2019 21:28


Sony introduces WF-1000XM3 wireless headphones with noise cancellation
Posted 8-Jul-2019 16:56


Xero announces new smarter tools, push into the North American market
Posted 19-Jun-2019 17:20


New report by Unisys shows New Zealanders want action by social platform companies and police to monitor social media sites
Posted 19-Jun-2019 17:09


ASB adds Google Pay option to contactless payments
Posted 19-Jun-2019 17:05


New Zealand PC Market declines on the back of high channel inventory, IDC reports
Posted 18-Jun-2019 17:35


Air New Zealand uses drones to inspect aircraft
Posted 17-Jun-2019 15:39


TCL Electronics launches its first-ever 8K TV
Posted 17-Jun-2019 15:18



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.