Page 3 of 3

Re: Securing Logins

Posted: Wed May 03, 2017 8:57 am
by ColdSteel
FishPants wrote: Did that by chance help with the security errors?
I'm still getting the "only secure content is displayed" popup.

Re: Securing Logins

Posted: Wed May 03, 2017 9:22 am
by TheMix
Interesting... I decided to take a look at the Black Pearl skin again. And there is no warning about unsecure links. For what this is worth.

Re: Securing Logins

Posted: Wed May 03, 2017 10:40 am
by FishPants
tjg_marantz wrote:10-4. I was hoping I'd missed something but I guess not.

Thanks for the replies :)
Wonder if that's the secure cookies borking tapatalk.. For an SSL certificate, this is a bit of a gong show. Sorry about that.

Re: Securing Logins

Posted: Wed May 03, 2017 10:45 am
by FishPants
Turned off SSL for the time being, will revisit after the upgrade.

Re: Securing Logins

Posted: Wed May 03, 2017 11:19 am
by GreenGoo
FishPants wrote:Turned off SSL for the time being, will revisit after the upgrade.
Uh...I'm still connected via https. At least that's what the URL bar says. Maybe a caching issue?

I noticed that any hotlinked content is also unsecure, which probably should have been obvious to me but wasn't. I believe that means that any page with hotlinked material will always have unencrypted content on it. What that means to individual browsers, I don't know. So any post with an image, pretty much.

In any case we can revisit after the upgrade.

Re: Securing Logins

Posted: Wed May 03, 2017 11:31 am
by FishPants
GreenGoo wrote:
FishPants wrote:Turned off SSL for the time being, will revisit after the upgrade.
Uh...I'm still connected via https. At least that's what the URL bar says. Maybe a caching issue?

I noticed that any hotlinked content is also unsecure, which probably should have been obvious to me but wasn't. I believe that means that any page with hotlinked material will always have unencrypted content on it. What that means to individual browsers, I don't know. So any post with an image, pretty much.

In any case we can revisit after the upgrade.
you can still opt to use https:// but I am not doing a url rewrite.. unless I need to restart apache... Just checked and I can poke around without https (or with if I type it in).

Re: Securing Logins

Posted: Wed May 03, 2017 7:42 pm
by Rumpy
I keep getting logged out today. Maybe related to this?

Re: Securing Logins

Posted: Wed May 03, 2017 9:08 pm
by Kraken
Rumpy wrote:I keep getting logged out today. Maybe related to this?
+1; I presume things will settle back down after Fishpants turns it off and back on again. Hopefully without another epic OOutage. :wink:

Re: Securing Logins

Posted: Thu May 04, 2017 8:25 am
by rshetts2
I too am no longer able to stay logged in and have to relog on every visit to the site. Im assuming these things are all tied together so hopefully its a temporary issue.

Re: Securing Logins

Posted: Thu May 04, 2017 9:36 am
by ColdSteel
GreenGoo wrote:Uh...I'm still connected via https. At least that's what the URL bar says. Maybe a caching issue?
I'm getting the same thing. The OO favorites link is http but when I click on it, the page that comes up is still https. What could be causing that? I have to manually change it to http once I'm on the site.

Re: Securing Logins

Posted: Thu May 04, 2017 4:16 pm
by Redfive
Probably related to everyone else and probably something to visit 'after the upgrade' but I get a 'This is not a secure site' message every time I try to log in while at work. I have to add a security exception every time.

Re: Securing Logins

Posted: Thu May 04, 2017 5:22 pm
by Holman
I keep getting logged out too.

Re: Securing Logins

Posted: Thu May 04, 2017 7:42 pm
by FishPants
Hopefully logout issues are resolved.. I renamed the cookie we are using (so it would make a new one) seems to have fixed it. You will need to login one more time to create the new cookie, but after I did that -- all seems well.

Re: Securing Logins

Posted: Thu May 04, 2017 7:45 pm
by Rip
This one tastes too healthy.

I liked the other one better.

:(

Re: Securing Logins

Posted: Thu May 04, 2017 9:20 pm
by ColdSteel
Thanks for fixing the issue I was having with the popup. All works fine now.

Re: Securing Logins

Posted: Fri May 05, 2017 9:26 am
by Redfive
Redfive wrote:Probably related to everyone else and probably something to visit 'after the upgrade' but I get a 'This is not a secure site' message every time I try to log in while at work. I have to add a security exception every time.
Back to normal, thank you :horse: