1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved SSL Certification before July 1st

Discussion in 'Web Design & Development' started by JiminSA, May 22, 2018.

Thread Status:
Not open for further replies.
Advertisement
  1. JiminSA

    JiminSA Thread Starter

    Joined:
    Dec 15, 2011
    Messages:
    3,190
    Hi Guys! Can anyone explain why, in my chrome browser, my personal site - bespoke-webwork.com - is showing as having a valid SSL Certificate, but is flagged on the right-hand side - "This page is trying to load scripts from unauthenticated sources"?
    When I click on this flag and opt to load unsafe scripts, my valid SSL certification falls away!!!
     
  2. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    55,140
    First Name:
    Derek
    JiminSA likes this.
  3. JiminSA

    JiminSA Thread Starter

    Joined:
    Dec 15, 2011
    Messages:
    3,190
    Brilliant Derek(y) I removed it and the site now loads secure!! Many thanks my friend!
     
  4. JiminSA

    JiminSA Thread Starter

    Joined:
    Dec 15, 2011
    Messages:
    3,190
    Derek, may I ask if you were able to spot this without ploughing through the source code? Because I have a similar problem site amosgodwin.com for which I am unable to find the offending script ...
     
  5. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    55,140
    First Name:
    Derek
    http://fonts.googleapis.com/css?family=Exo+2:700,400&subset=latin,cyrillic is the culprit this time. That should be easy to change to https in the offending file

    open Chrome/ select settings / (3 dots) select more tools/developer tools / network tab /all ( press F5 to refresh page in browser) and anything coming up in red is your problem

    Google Dev tools are very useful once you know what dross to avoid & get to the nitty gritty quickly

    I am getting too lazy in my old age to wade through pages of source code when I can do it the easy way
    The hard bit is often finding exactly what is calling that insecure font/css or js file

    This is being called from css/jquery.remodal.css which simply needs top line changing from
    Code:
    @Import url(http://fonts.googleapis.com/css?family=Exo+2:700,400&subset=latin,cyrillic); 
    to
    Code:
    @Import url(https://fonts.googleapis.com/css?family=Exo+2:700,400&subset=latin,cyrillic);
    Update: made a slight edit to add code tags because the @ import is actually a user name here so the forum software automatically thought I was tagging him
     
    Last edited: May 22, 2018
    Ent and JiminSA like this.
  6. JiminSA

    JiminSA Thread Starter

    Joined:
    Dec 15, 2011
    Messages:
    3,190
    Superb Derek - done and dusted!
     
  7. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    55,140
    First Name:
    Derek
    Always Pleased to help where I can Jim
     
    JiminSA likes this.
  8. JiminSA

    JiminSA Thread Starter

    Joined:
    Dec 15, 2011
    Messages:
    3,190
    As a footnote to this thread and hopefully of some help to those web developers who want their sites to have a certificate ...
    If your Hosting Service allows you to have a multi-domain hosting faciility - if the root site has SSL then all the domains within the multi-domain set-up are covered(y) Just upload an .htacces file into the root folder, with the following generic content ...
    Code:
    RewriteEngine On
    
    RewriteCond %{HTTPS} off
    
    RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
    In addition, you can obtain an SSL Certificate for free through the Linux Foundation's project Let's Encrypt but be sure to follow the installation procedure carefully, as per this video
     
    Last edited: May 25, 2018
  9. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    55,140
    First Name:
    Derek
  10. JiminSA

    JiminSA Thread Starter

    Joined:
    Dec 15, 2011
    Messages:
    3,190
    Yes indeed Derek! But most Hosts don't provide Cpanel for domain name only purchases, which are what one puts into multi-domain hosting packages. Just wanted to show our readers how to put in a free certificate, if their hosts don't provide them.
     
  11. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Similar Threads - Certification before July
  1. Anton111
    Replies:
    6
    Views:
    233
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1210557

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice