SSL Certificate

sjh

Active Member
Joined
Jan 10, 2016
Messages
155
Location
midlands uk
We know everybody re-uses passwords between sites, SSL certs are an important (and free) way of protecting your users from having passwords stolen via MITM attacks.

I can't recall if there was one installed before, but there certainly isn't now.

Let me know if you need any techie help!
 

Venture

Administrator
Staff member
Founder
Joined
Feb 26, 2010
Messages
2,121
sjh said:
We know everybody re-uses passwords between sites, SSL certs are an important (and free) way of protecting your users from having passwords stolen via MITM attacks.

I can't recall if there was one installed before, but there certainly isn't now.

Let me know if you need any techie help!
SSL is in the works. I might take you up on your offer!
 

sjh

Active Member
Joined
Jan 10, 2016
Messages
155
Location
midlands uk
Sutere thing, Looks like the site is hosted on ubuntu/apache - if you have root access it's easy - if it's through a control panel i'm sure i can help figure it out!
 

Venture

Administrator
Staff member
Founder
Joined
Feb 26, 2010
Messages
2,121
@sjh, New site is on Ubuntu/Nginx. If you know how to set everything up it would probably save me a lot of headaches. Let me know if you've been through this and if you can lend a hand.
 

Venture

Administrator
Staff member
Founder
Joined
Feb 26, 2010
Messages
2,121
I figured it out in record time. SUPER easy. I wish everything was this easy.

We are now secured for all communications using HTTPS.
 

snakebitten

Well-Known Member
2012 Site Supporter
2013 Site Supporter
2014 Site Supporter
Joined
Aug 6, 2011
Messages
5,681
Location
Coastal Texas
Impressive. SSL can be a stumper on a new platform the first time.

Sent from my SM-N950U using Tapatalk
 

Venture

Administrator
Staff member
Founder
Joined
Feb 26, 2010
Messages
2,121
Impressive. SSL can be a stumper on a new platform the first time.

Sent from my SM-N950U using Tapatalk
It turns out if you're on Ubuntu/Nginx it literally takes about 3 command line entries to do EVERYTHING - generate and download the cert, update the Nginx config, restart, and even put a CRON job in the re-download the cert every 90 days.

It took me longer to update some of the board specific configs than it did to actually get the webserver itself updated.
 

sjh

Active Member
Joined
Jan 10, 2016
Messages
155
Location
midlands uk
Congrats!

A lot of stuff is pretty turn-key now, let me know if you need any help in the future though!
 
Top