<![CDATA[ChipMusic.org - SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/topic/19381/ssltls-willing-to-assistconsult-on-securing-cmo/ Thu, 10 Aug 2017 06:43:09 +0000 PunBB <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/253675/#p253675 garvalf says:

wow, well done and thank you for TLS.
Mobile browsing and a html player will be perfect!

]]> Thu, 10 Aug 2017 06:43:09 +0000 https://chipmusic.org/forums/post/253675/#p253675 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/253670/#p253670 catskull says:
trash80 wrote:
catskull wrote:

Can help with mobile!

You know much CSS Grid? That's the option I am going with VS redoing all of the markup in Bootstrap.

Full time front end web dev. Haven't messed with it much directly, but I'm sure we can figure it out.

]]> Wed, 09 Aug 2017 21:49:14 +0000 https://chipmusic.org/forums/post/253670/#p253670 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/253668/#p253668 Trash80 says:
bryface wrote:

on a related note: Chrome now blocks flash, which in turn blocks the music players here (and on weeklybeats btw).  you have to right-click the container element and clck "Run this plugin" in order to play a song.  it's worse on weeklybeats because the flash widget is crammed into a 1x1 pixel area.

This is now fixed on Weeklybeats. At some point we will be replacing the music player on CMO but there are bigger issues first.

]]> Wed, 09 Aug 2017 19:30:49 +0000 https://chipmusic.org/forums/post/253668/#p253668 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/253667/#p253667 Trash80 says:
catskull wrote:

Can help with mobile!

You know much CSS Grid? That's the option I am going with VS redoing all of the markup in Bootstrap.

]]> Wed, 09 Aug 2017 19:30:00 +0000 https://chipmusic.org/forums/post/253667/#p253667 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/253666/#p253666 catskull says:

Can help with mobile!

]]> Wed, 09 Aug 2017 19:25:47 +0000 https://chipmusic.org/forums/post/253666/#p253666 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/253665/#p253665 Trash80 says:
jefftheworld wrote:

Fuck yeah! TLS!

It was fairly painful. The server had to be moved, and the music, and redo / update the music submission form.

Up next: Mobile (which is more painful but ~15% done)

]]> Wed, 09 Aug 2017 19:15:56 +0000 https://chipmusic.org/forums/post/253665/#p253665 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/253664/#p253664 jefftheworld says:

Fuck yeah! TLS!

]]> Wed, 09 Aug 2017 17:08:24 +0000 https://chipmusic.org/forums/post/253664/#p253664 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/252372/#p252372 jefftheworld says:

Firefox is now warning users of any non-secure login.

]]> Sun, 23 Apr 2017 17:19:52 +0000 https://chipmusic.org/forums/post/252372/#p252372 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/252079/#p252079 tearauth says:
jefftheworld wrote:

Such sass for no reason.

Sorry, i was only joking, reading back now i see my retort wasnt funny, and I know you're simply helping out, and I should have made it clear I meant free as in 'you wont have to pay for anything if you use letsencrypt' specifically

Anyway, Lets Encrypt being automatically setup by the cpanel wizard is the ideal solution, but this is only available in newer cpanel versions. I believe when added manually, there's another step in setting up the automagic renewal of the certificate which is yearly, I've not done this myself before since ive only used paid-for godaddy certs

Google is tightening up its policies on SSL, but Lets Encrypt seems to still be fine for now, and it makes sense for chipmusic.org to use it considering the DIY nature of the place

]]> Mon, 10 Apr 2017 11:51:44 +0000 https://chipmusic.org/forums/post/252079/#p252079 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/252023/#p252023 jefftheworld says:
tearauth wrote:
tearauth wrote:

and the latest ones even support letsencrypt which would be free

jefftheworld wrote:

You don't need to purchase an SSL cert if you are using Let's Encrypt.

Not all heros wear a cape, we appreciate you

Such sass for no reason. I was just reiterating that you can get a free let's encrypt cert even if your host does not directly support it.

The way that you word it makes it seem that you need to purchase an SSL cert if you choose to manually install it.

]]> Thu, 06 Apr 2017 16:12:47 +0000 https://chipmusic.org/forums/post/252023/#p252023 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/252004/#p252004 tearauth says:

useless post removed

]]> Thu, 06 Apr 2017 07:41:53 +0000 https://chipmusic.org/forums/post/252004/#p252004 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/251992/#p251992 jefftheworld says:
tearauth wrote:

If you do end up having to do it manually (if your VPS allows write access to the server config files) then you'll first need to find out if you're running apache or nginx, buy an apache ssl certificate from a provider such as godaddy, go through the process to generate the files required to upload to generate the certificate, upload those to the vps (with ssh i imagine), and reference them in the apache or nginx vhost

You don't need to purchase an SSL cert if you are using Let's Encrypt.

]]> Wed, 05 Apr 2017 17:13:31 +0000 https://chipmusic.org/forums/post/251992/#p251992 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/251987/#p251987 herr_prof says:

Im a patriot and have nothing to hide.

]]> Wed, 05 Apr 2017 14:46:51 +0000 https://chipmusic.org/forums/post/251987/#p251987 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/251985/#p251985 tearauth says:
jefftheworld wrote:

I'm not familiar with the specifics of that host but looking at the FAQ it seems to use SiteAdmin or cPanel? Both have some form of SSL Manager in the options that'll let you upload and configure your SSL/TLS. Most managed hosting doesn't allow you to directly touch Apache/server configs but the management interface almost always allows SSL/TLS configuration.

Forcing https:// is just a few simple lines in your .htaccess, something like this:

RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://chipmusic.org/$1 [R=301,L]

I know cpanel deffo does so this is accurate, newer versions of cpanel have a wizard for adding SSL automagically, and the latest ones even support letsencrypt which would be free

If you do end up having to do it manually (if your VPS allows write access to the server config files) then you'll first need to find out if you're running apache or nginx, buy an apache ssl certificate from a provider such as godaddy, go through the process to generate the files required to upload to generate the certificate, upload those to the vps (with ssh i imagine), and reference them in the apache or nginx vhost configurations (depending on your setup). After the sites gone up and down a bunch of times while that config is tested then the .htaccess change can be used to force https if its apache or it'd be in the nginx config if its nginx. I imagine the vps for this forum is pretty old so its probably apache2. I was able to accomplish the manual set up using the digital ocean ssl setup guides even for none-d.o sites

good luck and feel free to message me if you get stuck

]]> Wed, 05 Apr 2017 11:51:34 +0000 https://chipmusic.org/forums/post/251985/#p251985 <![CDATA[Re: SSL/TLS - Willing to assist/consult on securing CM.O]]> https://chipmusic.org/forums/post/251973/#p251973 catskull says:

Bumping this. I added SSL to my sites using cloudflare. It's super easy. Basically all you have to do change your nameservers to be cloudflare's nameservers. Also free. I am willing to help set it up!

ISPs will soon be able to sell your browsing history. The last thing I need is anyone finding out I still visit cm.o! big_smile

]]> Tue, 04 Apr 2017 16:26:48 +0000 https://chipmusic.org/forums/post/251973/#p251973