Problems implementing SSL
Permalink Browser Info Environment
I am trying to secure my site so that it uses https (I have an SSL certificate). I find that if I force a page to to be secure, the Google fonts are no longer used and I cannot access the control panel from that page (its contents are not there, just the panel). If I go to a page with mixed content, it displays as intended and I can access the control panel as normal. Looking at the source code for my pages, I think there are two lines that start http rather than https: if I add them as Extra Header Content with the http changed to https: the secure page and control panel all then work. These are two lines (with the web ADDRESS left out):
I may be wrong but it looks like it's the Fundamental theme that's causing my problem. It looks like it's not giving https addresses for those two lines. Any ideas, please?
<link href="http://www.ADDRESS/ccm/system/css/page/1/main.less" rel="stylesheet" type="text/css" media="all"> <link rel="stylesheet" href="http://www.ADDRESS/fundamental/css/googlefonts.css"/>
I may be wrong but it looks like it's the Fundamental theme that's causing my problem. It looks like it's not giving https addresses for those two lines. Any ideas, please?
| Type: | Ticket |
|---|---|
| Status: | Archived |
Thank you for your very quick reply. I wondered if this was the case but I’ve no idea what the required setting(s) might be. I’ve tried setting one or both URLs to the SSL address in the control panel. Have you any thoughts about the setting I need to change, please? I’ve run out of ideas.
Have you tried clearing your cache?
Also, there appears to be a post in the forums on this matter:
https://www.concrete5.org/community/forums/5-7-discussion/concrete5....
This may help.
Also, there appears to be a post in the forums on this matter:
https://www.concrete5.org/community/forums/5-7-discussion/concrete5....
This may help.
Thank you, yes, I’ve tried clearing the cache more than once but to no avail. I had already read that discussion thread and tried the things suggested (apart from the hard core hack to the code, which looks a bad idea to me!). There seems to be lot of frustration in that discussion, which obviously I now share. It now seems to me that something’s going on of which the theme is a casualty not a cause. I’ll give it all another go and let you know how I get on. Thank you again.
Solved! After a bit more trial and error, this is what worked:
In application/config/generated_overrides/concrete.php ...
I think there ought to be a 'make it SSL' button in Concrete5, rather than having to fiddle about until it works. That said, at least I was able to rule out the theme as the cause, and the replies helped me to find a way to work out it. Phew!
In application/config/generated_overrides/concrete.php ...
'seo' => [ 'canonical_url' => 'https://www.mywebsite.co.uk', 'trailing_slash' => false, 'url_rewriting_all' => true, 'redirect_to_canonical_url' => 0, 'url_rewriting' => true, ],
I think there ought to be a 'make it SSL' button in Concrete5, rather than having to fiddle about until it works. That said, at least I was able to rule out the theme as the cause, and the replies helped me to find a way to work out it. Phew!
Attention: Since there has been no activity on this issue for two weeks, this issue has been automatically archived.
To re-open this issue, reply to this message.
To re-open this issue, reply to this message.
The theme uses relative paths so there must be some settings in concrete5 you need to set.