Author Topic: [LIVE] Forum is now 100% SSL Supported  (Read 2488 times)

Peter

  • Administrator
  • Forum addict
  • *****
  • Posts: 1587
  • Karma: +37/-2
    • View Profile
[LIVE] Forum is now 100% SSL Supported
« on: May 03, 2015, 02:06:36 pm »
You can access our forums by typing: https://qbforums.shiki.hu

Let me know if you run into any issues. (Please, state your browser, OS.)
(For me, with Chrome's latest version, it works flawless.)

Ps.: For the next 2 hours we running with Cloudflare OFF.
« Last Edit: May 03, 2015, 10:04:11 pm by Peter »
- qBittorrent team - server and forum administrator.
- Hungarian translation reviewer/moderator (+ translator).

Join the official qBittorrent Discord!
https://discord.gg/ma66Vv4

Peter

  • Administrator
  • Forum addict
  • *****
  • Posts: 1587
  • Karma: +37/-2
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #1 on: May 03, 2015, 02:12:36 pm »
NOTE: There are still a few quirks, so we are running in Flexible SSL for now only.
I will iron out the issues tonight.

(So currently we are using Cloudflare's SSL only.)
- qBittorrent team - server and forum administrator.
- Hungarian translation reviewer/moderator (+ translator).

Join the official qBittorrent Discord!
https://discord.gg/ma66Vv4

sledgehammer_999

  • qBittorrent maintainer
  • Administrator
  • Forum addict
  • *****
  • Posts: 2406
  • Karma: +150/-2
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #2 on: May 03, 2015, 03:33:03 pm »
Yes, I can access the forum through HTTPS. Nice!
Are those certs free for cloudflare users?

100%

  • Veteran
  • ***
  • Posts: 88
  • Karma: +4/-0
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #3 on: May 03, 2015, 04:01:18 pm »
Good job, thanks!

Peter

  • Administrator
  • Forum addict
  • *****
  • Posts: 1587
  • Karma: +37/-2
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #4 on: May 03, 2015, 04:09:28 pm »
Yes, I can access the forum through HTTPS. Nice!
Are those certs free for cloudflare users?

The current temporary (flex), yes. But it's a "fake", since server and Cloudflare communicates unencrypted.
But! There is a cert for shiki.hu too, which will be used after I fix the quirks.
(For some unknown reason Apache refused to serve to page even after loading it properly, and I don't want to cause downtime at peak hours.)
- qBittorrent team - server and forum administrator.
- Hungarian translation reviewer/moderator (+ translator).

Join the official qBittorrent Discord!
https://discord.gg/ma66Vv4

sledgehammer_999

  • qBittorrent maintainer
  • Administrator
  • Forum addict
  • *****
  • Posts: 2406
  • Karma: +150/-2
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #5 on: May 03, 2015, 04:33:16 pm »
In case you didn't know startssl provides free one-year certs(that can be renewed) and it recognized by all major browsers: https://www.startssl.com/

Peter

  • Administrator
  • Forum addict
  • *****
  • Posts: 1587
  • Karma: +37/-2
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #6 on: May 03, 2015, 05:59:52 pm »
Cheers!

(The current cert will be a Comodo one, that's what my wallet allowed me to afford - and meh, others are just way toooo expensive anyway.
It does not have the green bar in the browser - those are extremely expensive, but it will show 100% green in every browser on all platforms.)

* I will start working on the issue at 20:00 GMT+1 or so, buckle up.
(The forum will be mainly available, but short downtimes are possible. The whole thing will only take a short period of time, like an hour or two.)
- qBittorrent team - server and forum administrator.
- Hungarian translation reviewer/moderator (+ translator).

Join the official qBittorrent Discord!
https://discord.gg/ma66Vv4

Nemo

  • qBittorrent Forum
  • Administrator
  • Forum addict
  • *****
  • Posts: 1494
  • Karma: +93/-0
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #7 on: May 03, 2015, 08:11:30 pm »
Thanks mate.
Forum Rules and Guidelines

Forum Admin.
Dutch & Turkish Translator.




Peter

  • Administrator
  • Forum addict
  • *****
  • Posts: 1587
  • Karma: +37/-2
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #8 on: May 03, 2015, 08:57:31 pm »
Alright, found the issue why I could not enable the full support, just one moment and we are live. : )
- qBittorrent team - server and forum administrator.
- Hungarian translation reviewer/moderator (+ translator).

Join the official qBittorrent Discord!
https://discord.gg/ma66Vv4

sledgehammer_999

  • qBittorrent maintainer
  • Administrator
  • Forum addict
  • *****
  • Posts: 2406
  • Karma: +150/-2
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #9 on: May 03, 2015, 09:04:49 pm »
For some reason "HTTPS Everywhere" firefox plugin doesn't switch to the https version automatically when I input "qbforums.shiki.hu" in the address bar...

Peter

  • Administrator
  • Forum addict
  • *****
  • Posts: 1587
  • Karma: +37/-2
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #10 on: May 03, 2015, 09:08:15 pm »
As far as I know that plugin only redirects you if the site is in the plugin's database.
It's here: https://www.eff.org/https-everywhere/atlas/index.html
https://www.eff.org/https-everywhere/rulesets

I will contact them once the full support is in place.
- qBittorrent team - server and forum administrator.
- Hungarian translation reviewer/moderator (+ translator).

Join the official qBittorrent Discord!
https://discord.gg/ma66Vv4

sledgehammer_999

  • qBittorrent maintainer
  • Administrator
  • Forum addict
  • *****
  • Posts: 2406
  • Karma: +150/-2
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #11 on: May 03, 2015, 09:39:29 pm »
As far as I know that plugin only redirects you if the site is in the plugin's database.
It's here: https://www.eff.org/https-everywhere/atlas/index.html
https://www.eff.org/https-everywhere/rulesets

I will contact them once the full support is in place.

Hmm, I was under the impression that the plugin tried in the background for every URL to change http->https and see if that works, and then redirect firefox.

Peter

  • Administrator
  • Forum addict
  • *****
  • Posts: 1587
  • Karma: +37/-2
    • View Profile
Re: Forum is now 100% SSL Supported
« Reply #12 on: May 03, 2015, 09:56:05 pm »
AND WE ARE ON.

100% strict SSL on the entire forums. (Not the fake SSL by Cloudflare.)

If you don't see the green padlock, the reason is simple: Someone linked an image from a non-secure site.
For example Nemo's http signatures break the padlock sign. :P

But even if that happens, the rest is served over secured HTTPS.
- qBittorrent team - server and forum administrator.
- Hungarian translation reviewer/moderator (+ translator).

Join the official qBittorrent Discord!
https://discord.gg/ma66Vv4

ciaobaby

  • Forum addict
  • ****
  • Posts: 2771
  • Karma: +98/-25
  • No quarter asked... No quarter given.
    • View Profile
    • WMTeu
Re: [LIVE] Forum is now 100% SSL Supported
« Reply #13 on: May 03, 2015, 10:36:47 pm »
Tee hee :)

That was somewhat ironic, there I was reading this thread (over https)  and went to "Unread replies" and BAM!!

SSL handshake error
Smarter than the av-er-age bear, Boo Boo.

http://qbforums.shiki.hu/index.php/topic,3084.0.html

Peter

  • Administrator
  • Forum addict
  • *****
  • Posts: 1587
  • Karma: +37/-2
    • View Profile
Re: [LIVE] Forum is now 100% SSL Supported
« Reply #14 on: May 03, 2015, 10:57:14 pm »
Could you give me a "copy URL" from the HTTPS version of the "unread replies"?

I have already modified all the settings / paths / themes / even the ico... it must be some leftover stuff.

* By the way the site serves most stuff through HTTPS even for HTTP-only visitors - because SMF cannot really handle a hybrid-mode. Not that it matters, even old IE can browse HTTPS sites, and Google/other bots can also index them.
« Last Edit: May 03, 2015, 11:00:16 pm by Peter »
- qBittorrent team - server and forum administrator.
- Hungarian translation reviewer/moderator (+ translator).

Join the official qBittorrent Discord!
https://discord.gg/ma66Vv4