Identifiez-vous
> > > Offer SSL


Messages dans le sujet: Offer SSL
forbiddenlake
Membre

Nbr msg: 34
Enregistré: 31/05/2015
Ecrit le: 24/07/2016 02:42

Please enable http*s* at least on the CDN. My site can run over https but browsers refuse to include mixed content by default, so including the Magelo stuff doesn't work.
If cost is a concern you can get a free certificate for all the subdomains you control via Let's Encrypt.
Jelan
Admin

Nbr msg: 11384
Enregistré: 05/05/2001
Ecrit le: 29/08/2016 11:16

Hi,

We had a tiny delay in renewing our SSL certificates but this is now solved. We will soon transition to http 2.0 so all our traffic is encrypted.
forbiddenlake
Membre

Nbr msg: 34
Enregistré: 31/05/2015
Ecrit le: 31/08/2016 04:23

Thanks for looking at this. Currently it appears SSL is not offered on the CDN, and on the web site, https redirects to http(?!). Looking forward to when the CDN is available over HTTPS.

:~$ curl "https://www.magelocdn.com/pack/rift/en/magelo-bar.js#1"
curl: (7) Failed to connect to www.magelocdn.com port 443: Connection refused

:~$ curl "https://rift.magelo.com/en/forum/messages.jspa?topic=16625"
:~$ curl -I "https://rift.magelo.com/en/forum/messages.jspa?topic=16625"
HTTP/1.1 302 Found
Date: Wed, 31 Aug 2016 02:22:29 GMT
Location: http://rift.magelo.com/en/forum/messages.jspa?topic=16625
Content-Length: 0
Jelan
Admin

Nbr msg: 11384
Enregistré: 05/05/2001
Ecrit le: 09/09/2016 10:37

Thanks for the followup. We had a certificate with our CDN provider and it looks like it has been removed..

I will put one back asap.
Jelan
Admin

Nbr msg: 11384
Enregistré: 05/05/2001
Ecrit le: 12/11/2016 18:26

Hi forbiddenlake,

All magelo traffic is now served over http 2.0