SSL Testing

Started by Toruk Makto, May 20, 2014, 10:37:59 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Toruk Makto

Kaltxì ma tsmuk!

With web security becoming more important, especially in the light of recent high-profile hacks, I have gone ahead and set up SSL (https://) for beta testing on the server. Right now, only the forum is available with it, and it is running with a self-signed certificate. If you like, you can try it out by typing https://forum.learnnavi.org in your browser. That self-signed cert will probably cause your browser to whine at you about a security problem, but you can accept it for use. I promise the site won't bite... Since I don't want to put the forums on a default redirect to https, it will probably slip back to regular http as old links are redisplayed. If it looks like everything is working ok, I will spring for a wildcard domain key from one of the regular certificate authorities and get us on a real SSL cert that won't trip browser alarms and put a permanent redirect to the secure form.

If you try it and it doesn't work for you, please let me know in this topic.

Irayo!

- Markì



Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Toruk Makto

#1
Ok, after due process, it is determined that the mixed content problem is still causing trouble. So instead of forcing the whole board to SSL, I have instead set just logins and registrations for SSL only. The rest of the board operation will be plain http as before.

I was also able to put all of the back-end administrative stuff on SSL, so mission accomplished, as far as I am concerned.

-M.

EDIT: SMF is being its usual pain in the txìm. The SSL login and registration isn't working yet. Still banging on it. Stay tuned.

ANOTHER EDIT: OK, SSL login and registration is working. Woo!

Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

`Eylan Ayfalulukanä

Do any of these changes affect the Dothraki forums?

Yawey ngahu!
pamrel si ro [email protected]

Toruk Makto

No, this wildcard cert is for learnnavi only. If ssl is ever needed for the dothraki stuff, it will need its own certificate.

Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Kame Ayyo’koti

I'm unable to login with Opera. It gives me the following error. I can browse and read, however.

I've never used Opera before, so maybe it's a problem on my end.

"Your work is to discover your world, and then with all your heart give yourself to it."

`Eylan Ayfalulukanä

Ma  Kame Ayyo'koti,
    What OS are you using?
    How do you connect to the interhet?

Yawey ngahu!
pamrel si ro [email protected]

Kame Ayyo’koti

I use Ubuntu Linux 13.10. We have a local network here at the house, and this PC physically connects to the router. We have broadband.

Hmmm... but I can log in through Opera with my Windows XP VM. Very strange. I'll play around with settings and see if I can't get it work with in Linux.
"Your work is to discover your world, and then with all your heart give yourself to it."

Tanri

I can confirm that Opera error, unfortunately. I have tested Opera 12.17 on WinXP 32bit, WinXP 64bit, Win7 32bit.
Seems like Opera-only issue. On the same machine, Chrome works without a glitch.
Tätxawyu akì'ong.

Kame Ayyo’koti

Quote from: Tanri on June 01, 2014, 01:14:46 PMSeems like Opera-only issue.
Tse, that's lame. =/ I haven't been able to get it to work. Oh well.

Irayo for helping guys.
"Your work is to discover your world, and then with all your heart give yourself to it."

Tìtstewan

I just downloaded Opera and tested with it. It works for me.
Are you have take a look at the certificates if they have been loaded? settings>security>HTTPS/SSL (I don't know, if Linux have the same stuff)
You also should take a look at the advanced options there to check out the boxes.

-| Na'vi Vocab + Audio | Na'viteri as one HTML file | FAQ | Useful Links for Beginners |-
-| Kem si fu kem rä'ä si, ke lu tìfmi. |-

Kame Ayyo’koti

The options menus for Linux vs Windows look completely different, and I just discovered why: The Windows version is 21.0, while the Linux version is still just 12.16! I'm guessing they fixed this problem in a later update that hasn't come to Linux yet.

It seems like the Linux version just isn't a priority for their team, if this thread tells me anything. Something that unfortunately us *nix users are used to. :P

Oh well, it's not that big a deal. :)
"Your work is to discover your world, and then with all your heart give yourself to it."

`Eylan Ayfalulukanä

Why not use Firefox? It is up todate for Linux. I run Fedora 20 on my system. I'm only on version 26, but I know 29 is available.

Yawey ngahu!
pamrel si ro [email protected]

Kame Ayyo’koti

Quote from: `Eylan Ayfalulukanä on June 02, 2014, 12:36:04 AM
Why not use Firefox? It is up todate for Linux. I run Fedora 20 on my system. I'm only on version 26, but I know 29 is available.
I do use Firefox, and Chromium. Opera is faster and more efficient, though.
"Your work is to discover your world, and then with all your heart give yourself to it."

Tìtstewan

I will not start a browser discussion, but as for FireFox, I can tell, that the update from 28 to 29 was useful, because the newer version is faster than the old one.
As for the Linux version, there should be something in the settigs about certificates? I read somewhere, that a check box could be unchecked regarding TLS/SSL or something related.

-| Na'vi Vocab + Audio | Na'viteri as one HTML file | FAQ | Useful Links for Beginners |-
-| Kem si fu kem rä'ä si, ke lu tìfmi. |-

Tanri

After few days outside of internet, I just jumped in and Opera works perfectly, as before.
Thanks for fix! Irayo nìtxan!
Tätxawyu akì'ong.

Toruk Makto

I updated the OpenSSL libs to 1.0.1h and updated Apache to 2.2.27. This fixed a couple of nits I was having with some other stuff, so maybe it helped for Opera as well.

-M.

Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Kame Ayyo’koti

Hey, it works for me now, too! Huh... Well that's good. :)
"Your work is to discover your world, and then with all your heart give yourself to it."

Toruk Makto


Lì'fyari leNa'vi 'Rrtamì, vay set 'almong a fra'u zera'u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf