Lack of Https support is making this site very difficult to use

[John Lawton]

I can't help thinking that Les could simply raise a support ticket with the hosting ISP and they'll sort it out.

John

[top204]

I've tried that, and they open a stupid bot to chat. However, I do not have a clue to all the acronyms they use and when I try to understand what is going on, the cpanel site just puts me back to the same page where I do not understand a word it is stating! I try to do d simple task of re-issuing the SSL or whatever it is, and it just goes back to the same page for help and not actually doing. If they have teh SSL code and it is still valid, why the hell do I have to go through all of this crap to try and re-install something that did not need altering in the first place?

I will gladly give the cpanel password to a trusted forum user, so they can sort it out, because I simply cannot, and I have, essentially, given up trying!

[John Lawton]

Hi Les,

please do, and please include your host ISP support login details so someone can raise a support ticket with them.

John

[trastikata]

I've decided to try and see if I'll manage to install a certificate on the same hosting as Les ... took me few hours and lots of bad words to figure it out, but finally did it  .

If you want I can install it for you Les.

[top204]

Yes please trastikata.

For someone with experience working with the internet and it still taking a few hours to sort it out shows the nonsense it is! I still do not understand why it is not defaulted if it is so very important (which it is not unless personal details are held in the host space). The host knows all of the SSL details because they sent it to me in an email, so why is an SSL not automatically assigned to an HTTP site?

Browsers seem to be getting just like rip-off virus scanners and go for the "this means doom!!!!!" scenario all the time, even when it is far from it.

Send me an email and I will give you the log in details and give you the email proof text they send to me.

A thousand thanks if you can sort it.

[trastikata]

Send me an email and I will give you the log in details and give you the email proof text they send to me.

Hello Les,

I've sent you a PM with my email, it should be in your mail list, it is the old one.

I don't understand it either - something so important for normal site usage and so complicated to do. And worst thing is it has to be reissued every year although the certificate is 5 years ...

Check your PM inbox.

[John Lawton]

Well done.

Use AutoSSL and it... auto-renews.

J

[top204]

Many, many thanks Dyanko, and many thanks for your offer to sort it out John.

We have some wonderful people on this forum.

[trastikata]

Well done.

Use AutoSSL and it... auto-renews.

J

John, unfortunately as per new regulations (who knows by who  ) new certificates have to be reissued every year which means new CSR request, new validation and certificate installation, although they may be purchased for several years ahead ... control everywhere nowadays.

[John Lawton]

Well done getting the certificate installed, phew, back to normal at last!

I've not heard that AutoSSL will no longer work, where did you hear that please?

John

[trastikata]

Purchasing an SSL certificate for more than 1 year is no longer possible. Due to changes in Apple, Mozilla and Google Root Store Policies, as of September 1, 2020, newly issued SSL/TLS certificates with a validity period greater than 13 months (397 days) are prohibited by policy and will not be trusted.

[JohnB]

Well done @trastikata thankyou for your work.

[John Lawton]

Purchasing an SSL certificate for more than 1 year is no longer possible. Due to changes in Apple, Mozilla and Google Root Store Policies, as of September 1, 2020, newly issued SSL/TLS certificates with a validity period greater than 13 months (397 days) are prohibited by policy and will not be trusted.

That doesn't mean that AutoSSL will fail to work anymore, and indeed it is working for me on my websites. It auto-renews the cert when it is about to expire. If this site doesn't use AutoSSL then I assume someone will need to manually renew the certificate when it becomes due for renewal - which certainly isn't ideal.

Incidentally my Edge browser insists the site is 'Not secure':

This site has a valid certificate, issued by a trusted authority.

However, some parts of the site are not secure. This means information (such as passwords or credit cards) might not be securely sent to this site and may be intercepted or seen by others.

Make of that what you will.

[trastikata]

Incidentally my Edge browser insists the site is 'Not secure':

This site has a valid certificate, issued by a trusted authority.

However, some parts of the site are not secure. This means information (such as passwords or credit cards) might not be securely sent to this site and may be intercepted or seen by others.

Make of that what you will.

John, is this about www.protoncompiler.com or your site?

[John Lawton]

Interesting, yes I was referring to this site protoncompiler.com but when I clicked your link, a new browser tab appeared without the "Not secure" message, so I currently have two tabs open, one secure the other apparently not

Naturally I had tried refreshing the offending tab, but to no avail.

So rather odd, but probably no cause for concern.

John

[trastikata]

I've verified the certificate on-line for both with and without www and there are no issues:

https://decoder.link/sslchecker/www.protoncompiler.com/443
https://decoder.link/sslchecker/protoncompiler.com/443

In your case looks like it might be a browser cash issue?

[John Lawton]

Indeed, and I'm now ignoring it.

Well done again.

John

[See_Mos]

Well done and thanks Trastikata

Back to normal in Siri

[Frizie]

Many, many thanks guys!

[RGV250]

Hi John,

Incidentally my Edge browser insists the site is 'Not secure':

Chrome said the same when refreshing but close it down and open a new window and all is fine.

Bob