New Let's Encrypt SSL certs active yet?

Are you using LiveCode to create server scripts or CGIs?

Moderators: FourthWorld, heatherlaine, Klaus, kevinmiller, robinmiller

Post Reply
ClipArtGuy
Posts: 253
Joined: Wed Aug 19, 2015 4:29 pm

New Let's Encrypt SSL certs active yet?

Post by ClipArtGuy » Thu Aug 30, 2018 8:02 pm

I was wondering if anyone else has tried to use this yet. I received an e-mail the other day stating that starting today, I would be able to enable HTTPS via certs SSL issued by Let's Encrypt by adding this to my .htaccess file:

Code: Select all

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
This doesn't seem to be working. I'm not a server expert, so I'm wondering:

Do I just need to be more patient, or am I missing something.

ghettocottage
Livecode Opensource Backer
Livecode Opensource Backer
Posts: 366
Joined: Tue Apr 10, 2012 9:18 am

Re: New Let's Encrypt SSL certs active yet?

Post by ghettocottage » Thu Aug 30, 2018 9:01 pm

That is just a rule that says something like: if someone visits this website using http, then switch it to use https

you will still need to get your cert from LE. Who is your web-host? or do you have your own server?

ClipArtGuy
Posts: 253
Joined: Wed Aug 19, 2015 4:29 pm

Re: New Let's Encrypt SSL certs active yet?

Post by ClipArtGuy » Thu Aug 30, 2018 9:04 pm

I Use livecode hosting (probably should have mentioned that), and received this e-mail:
We have two exciting additions to your LiveCode Hosting Server.

Firstly, we are providing everyone with free SSL certificates from Let’s Encrypt. These will be activated on Thursday 30 August and should be available later on that day, though this is dependent on Let’s Encrypt issuing the certificates. If you have an existing certificate then this will be unaffected, but any other domains you may have that are currently unsecured should become secured.

You may be aware that there has been a trend in recent times to deprecate http and use https exclusively for security reasons. This should enable you to do so if you wish to. However, you should note that your websites will not magically start using https where it hasn’t previously been specified. You will need to tweak them in order to take advantage of this. The easiest way to do this is with the .htaccess file. For instance adding the following code to the .htaccess in the document root of each of your websites:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

If you’re running a WordPress site you may also want to change the URL locations in wordpress to specify https instead of http.

Additionally, LiveCode Server 9 (32 bit) is available on your server right now. If you want to use LiveCode Server 9 instead the previously installed version (7) simply use the file extension .lc9 instead of .lc. LiveCode 7 will continue to be available with a .lc file extension.

If you need any assistance or experience any problems please contact us at livecodehosting@livecode.com.

Regards,

Robin

Robin Miller
Server Admin
LiveCode Ltd.
It seems that they will be providing the certs via LE. I'm just not sure what else I would need to do beyond editing the .htaccess file as per the e-mail.....

ghettocottage
Livecode Opensource Backer
Livecode Opensource Backer
Posts: 366
Joined: Tue Apr 10, 2012 9:18 am

Re: New Let's Encrypt SSL certs active yet?

Post by ghettocottage » Thu Aug 30, 2018 10:47 pm

In that case it should work just fine. You can test to see if your ssl cert is in place by just visiting https://yourdomain.com

ClipArtGuy
Posts: 253
Joined: Wed Aug 19, 2015 4:29 pm

Re: New Let's Encrypt SSL certs active yet?

Post by ClipArtGuy » Thu Aug 30, 2018 10:58 pm

Without the above code in my .htaccess file, it will go to the site, but still show as unsecured/invalid in the address bar. Using the the modified .htaccess file throws an invalid cert error. I guess I'll give it a couple days, and see if it is just taking a bit longer than expected.

ghettocottage
Livecode Opensource Backer
Livecode Opensource Backer
Posts: 366
Joined: Tue Apr 10, 2012 9:18 am

Re: New Let's Encrypt SSL certs active yet?

Post by ghettocottage » Fri Aug 31, 2018 9:47 pm

can you give us your domain?

Klaus
Posts: 13806
Joined: Sat Apr 08, 2006 8:41 am
Location: Germany
Contact:

Re: New Let's Encrypt SSL certs active yet?

Post by Klaus » Fri Aug 31, 2018 10:04 pm

I received this today:
...
Firstly, we are providing everyone with free SSL certificates from Let’s Encrypt. These will be activated on Thursday 20 September and should be available later on that day, though this is dependent on Let’s Encrypt issuing the certificates. If you have an existing certificate then this will be unaffected, but any other domains you may have that are currently unsecured should become secured.
...
So maybe there will be a little delay until everything is in place.

ClipArtGuy
Posts: 253
Joined: Wed Aug 19, 2015 4:29 pm

Re: New Let's Encrypt SSL certs active yet?

Post by ClipArtGuy » Fri Aug 31, 2018 10:25 pm

Klaus wrote:
Fri Aug 31, 2018 10:04 pm
I received this today:
...
Firstly, we are providing everyone with free SSL certificates from Let’s Encrypt. These will be activated on Thursday 20 September and should be available later on that day, though this is dependent on Let’s Encrypt issuing the certificates. If you have an existing certificate then this will be unaffected, but any other domains you may have that are currently unsecured should become secured.
...
So maybe there will be a little delay until everything is in place.
I suppose it's possible that i may have received an early draft of this email. Mine definitely said 30 August.....

jacque
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 7215
Joined: Sat Apr 08, 2006 8:31 pm
Location: Minneapolis MN
Contact:

Re: New Let's Encrypt SSL certs active yet?

Post by jacque » Sat Sep 01, 2018 5:26 pm

About a week ago I also received the email that said August 30. I'm guessing they're updating the servers serially, each with a different target date.
Jacqueline Landman Gay | jacque at hyperactivesw dot com
HyperActive Software | http://www.hyperactivesw.com

ClipArtGuy
Posts: 253
Joined: Wed Aug 19, 2015 4:29 pm

Re: New Let's Encrypt SSL certs active yet?

Post by ClipArtGuy » Sat Sep 01, 2018 8:13 pm

jacque wrote:
Sat Sep 01, 2018 5:26 pm
About a week ago I also received the email that said August 30. I'm guessing they're updating the servers serially, each with a different target date.
That makes sense. It still doesn't appear to have taken effect on the tio server, but I'll give it a week or two, and see if it's just taking longer than expected. It's not an urgent need at this point.

Post Reply

Return to “CGIs and the Server”