https and reply notifications

Get help with installation and running phpBB 3.2.x here. Please do not post bug reports, feature requests, or extension related questions here.
Post Reply
User avatar
shortmort37
Registered User
Posts: 656
Joined: Sat Aug 26, 2006 8:40 pm
Location: Upper Darby, PA, USA
Name: Dan Morton
Contact:

https and reply notifications

Post by shortmort37 »

I recently added a certificate to my website, and changed my server config to https. However, when I receive notifications of replies to posts, they still reference http:
If you want to view the newest post made since your last visit, click the
following link:

http://www.59plymouth.net/59forum/viewt ... ead#unread
Here's a snippet from my config. Do I need to force server URL settings? Should I change port 80 to port 443?

Thanks
Dan

forum.JPG
rxu
Extensions Development Team
Posts: 3711
Joined: Wed Oct 25, 2006 12:46 pm
Location: Siberia, Russian Federation
Contact:

Re: https and reply notifications

Post by rxu »

Do you have Cookie secure setting enabled in ACP/Cookie settings?
User avatar
shortmort37
Registered User
Posts: 656
Joined: Sat Aug 26, 2006 8:40 pm
Location: Upper Darby, PA, USA
Name: Dan Morton
Contact:

Re: https and reply notifications

Post by shortmort37 »

I did not - but, I just set it. However, I did config to "force server URL settings", and used a secondary account to trigger a reply notification. That seemed to have fixed it - the notification references https.

Dan
User avatar
2600
I've Been Banned!
Posts: 2567
Joined: Fri Nov 14, 2014 5:14 pm
Location: Area-51

Re: https and reply notifications

Post by 2600 »

It needs to be port 443.
Morpheus: Unfortunately, no one can be told what The Matrix is. You'll have to see it for yourself.
Hack me.
Consider a canary token.
The nature of my chosen username
:ugeek:
User avatar
shortmort37
Registered User
Posts: 656
Joined: Sat Aug 26, 2006 8:40 pm
Location: Upper Darby, PA, USA
Name: Dan Morton
Contact:

Re: https and reply notifications

Post by shortmort37 »

I found that it’s superfluous. All it does is add :443 to the end of the URL, e.g.,

https://www.59plymouth.net:443/59forum

But https instructs the browser to use 443 anyway.
User avatar
2600
I've Been Banned!
Posts: 2567
Joined: Fri Nov 14, 2014 5:14 pm
Location: Area-51

Re: https and reply notifications

Post by 2600 »

It doesn't do that for me. Something is wrong. Port 443 is for HTTPS.
Morpheus: Unfortunately, no one can be told what The Matrix is. You'll have to see it for yourself.
Hack me.
Consider a canary token.
The nature of my chosen username
:ugeek:
User avatar
3Di
I've Been Banned!
Posts: 17538
Joined: Mon Apr 04, 2005 11:09 pm
Location: I'm with Ukraine 🇺🇦
Name: Marco
Contact:

Re: https and reply notifications

Post by 3Di »

Usually 80 is ok also for https, depends on a per server configuration though, is not a rule.
🆓 Free support for our extensions also provided here: phpBB Studio
🚀 Looking for a specific feature or alternative option? We will rock you!
Please PM me only to request paid works. Thx. Buy me a coffee -> Image
My development's activity º PhpStorm's proud user º Extensions, Scripts, MOD porting, Update/Upgrades
User avatar
shortmort37
Registered User
Posts: 656
Joined: Sat Aug 26, 2006 8:40 pm
Location: Upper Darby, PA, USA
Name: Dan Morton
Contact:

Re: https and reply notifications

Post by shortmort37 »

Empirically, my observation is that putting a value other than 80 in the server port results in an explicit append of that port to the end of the URL in the email notification a user receives when there is a reply to their post. It's the difference between

https://www.59plymouth.net/59forum

and

https://www.59plymouth.net:443/59forum

But the explicit reference in the latter is redundant. https in the URL is an instruction to the browser to use secure socket (SSL) on port 443 when communicating with the server.

There may be other reasons why one might want to use a different server port. My problem was solved by forcing the server URL settings to https. Your mileage may vary.

Dan
User avatar
3Di
I've Been Banned!
Posts: 17538
Joined: Mon Apr 04, 2005 11:09 pm
Location: I'm with Ukraine 🇺🇦
Name: Marco
Contact:

Re: https and reply notifications

Post by 3Di »

IMO your actual settings are not complete/wrong, if you go to

http://www.59plymouth.net/59forum/viewt ... =47&t=3187

You will see the redirect doesn't apply, since there is not a redirect in your .htaccess I believe.

Not to mention is not storing cookies at all and takes ages to open the page.

Have a look here with search about http to https (most of the related relevant posts are mines) in order to get the right configuration.
🆓 Free support for our extensions also provided here: phpBB Studio
🚀 Looking for a specific feature or alternative option? We will rock you!
Please PM me only to request paid works. Thx. Buy me a coffee -> Image
My development's activity º PhpStorm's proud user º Extensions, Scripts, MOD porting, Update/Upgrades
User avatar
shortmort37
Registered User
Posts: 656
Joined: Sat Aug 26, 2006 8:40 pm
Location: Upper Darby, PA, USA
Name: Dan Morton
Contact:

Re: https and reply notifications

Post by shortmort37 »

3Di wrote: Thu May 10, 2018 3:51 am IMO your actual settings are not complete/wrong, if you go to

http://www.59plymouth.net/59forum/viewt ... =47&t=3187

You will see the redirect doesn't apply, since there is not a redirect in your .htaccess I believe.
That URL was generated by an email notification before I changed the setting to force server URL. Now, I get links that look like this:

https://www.59plymouth.net/59forum/view ... =47&t=3187
3Di wrote: Thu May 10, 2018 3:51 am Not to mention is not storing cookies at all and takes ages to open the page.
Yeah. Well, you get what you pay for! My ISP is cheap, but content delivery is less than stellar.

Why do you say it is not storing cookies? I ask it to remember my password in a cookie, and it does.
3Di wrote: Thu May 10, 2018 3:51 am Have a look here with search about http to https (most of the related relevant posts are mines) in order to get the right configuration.
If you intended to provide a link, you didn't.
User avatar
Mick
Support Team Member
Support Team Member
Posts: 26508
Joined: Fri Aug 29, 2008 9:49 am

Re: https and reply notifications

Post by Mick »

Your cookies look fine with SSL. I believe when 3Di said “have a look here” he meant as in search phpbb.com.
  • "The more connected we get the more alone we become" - Kyle Broflovski©
  • "The good news is hell is just the product of a morbid human imagination.
    The bad news is, whatever humans can imagine, they can usually create.
    " - Harmony Cobel
Post Reply

Return to “[3.2.x] Support Forum”