MyBB Community Forums

Setting up HTTPS 

Hi MyBB Team, Need Help to Upgrade the Board 1.8 with Security Https -Read the Documentation and work perfect to my homesite but in the SubDomains, have that error Display:



The Certificado of Subdomain its ok, can check the image:


Sorry, i am lost with that!

In the Browser of Safari work perfect the Domain and the SubDomains Security Settings Https But wits Google Chrome and Firefox NOT enter to Web!  

Hope can help me.

Thanks in Advance!

bye

Your SSL Certificate is self-signed and is not validated by a trusted CA. I'd recommend setting up LetsEncrypt is cost of a signed SSL certificate is an issue. LetsEncrypt is trusted by most modern browsers.

(2017-05-09, 01:05 AM)Lunorian Wrote: [ -> ]I'd recommend setting up LetsEncrypt is cost of a signed SSL certificate is an issue.

I second this, Letsencrypt is fine for a majority of use-cases for SSL.

(2017-05-09, 01:50 AM)Ben Cousins Wrote: [ -> ]

(2017-05-09, 01:05 AM)Lunorian Wrote: [ -> ]I'd recommend setting up LetsEncrypt is cost of a signed SSL certificate is an issue.

I second this, Letsencrypt is fine for a majority of use-cases for SSL.

Another good solution is Cloudflare, they issue multi-domain certificates (only cloudflare knows the private key) and can even do full strict where they'll issue a cloudflare signed certificate for your domain (only cloudflare trusts it) so they know cloudflare's connection to your site is secure. The certificate your browser sees (the multi-domain) will be signed by Comodo and it's free of charge.

---

That's new. Back when I had a cert through CF it was to CF's CDN only, and was unencrypted the rest of the way. I prefer to manage my own SSL.

I just installed an SSL with Let's Encrypt today on a MyBB site and I highly recommend it. If you have root access to your web server, you'll want to follow the instructions here:

https://letsencrypt.org/getting-started/

Select the software and system from here:

https://certbot.eff.org/

Follow the instructions to install certbot and then setup a cron job to renew the certificate. I ran:

0 */12 * * * /certbot-auto renew

Which checks every 12 hours.

In WHM under the SSL/TLS section, I updated "Manage AutoSSL" to use LetsEncrypt.

Under "Install an SSL Certificate on a Domain" I browsed certificates, selected the domain of the MyBB website, and installed.

From the MyBB Admin CP I also needed to change the "Board URL" under Configuration. If you've made any custom template changes that refer to stylesheets, scripts or images by full URL, you'll have to change those to https in the template files.

I hope these instructions help.

Thanks to all [ Lunorian, Ben Cousins, freshpromo]  for you FeedBacks, hope can setting in the coming days, that information maybe help me... I must Read the documentation again.

Gracias!

(2017-05-24, 05:24 PM)freshpromo Wrote: [ -> ]I just installed an SSL with Let's Encrypt today on a MyBB site and I highly recommend it. If you have root access to your web server, you'll want to follow the instructions here:

https://letsencrypt.org/getting-started/

Select the software and system from here:

https://certbot.eff.org/

Follow the instructions to install certbot and then setup a cron job to renew the certificate. I ran:

0 */12 * * * /certbot-auto renew

Which checks every 12 hours.

In WHM under the SSL/TLS section, I updated "Manage AutoSSL" to use LetsEncrypt.

Under "Install an SSL Certificate on a Domain" I browsed certificates, selected the domain of the MyBB website, and installed.

From the MyBB Admin CP I also needed to change the "Board URL" under Configuration. If you've made any custom template changes that refer to stylesheets, scripts or images by full URL, you'll have to change those to https in the template files.

I hope these instructions help.

every 12 hours is QUITE excessive. AFAIK, the cert will ONLY renew when it's due to expire in 30 days.

for me, I run mine every Monday morning.

(2017-05-25, 07:30 AM)andrewjs18 Wrote: [ -> ]every 12 hours is QUITE excessive.  AFAIK, the cert will ONLY renew when it's due to expire in 30 days.  

for me, I run mine every Monday morning.

I do mine manually... I just can't find a nice middle-ground for a cron.

Thanks for the feedback. I was following the Certbot instructions that read:

Note:
if you're setting up a cron or systemd job, we recommend running it twice per day (it won't do anything until your certificates are due for renewal or revoked, but running it regularly would give your site a chance of staying online in case a Let's Encrypt-initiated revocation happened for some reason). Please select a random minute within the hour for your renewal tasks.

However perhaps I should re-asses.