Using concrete5 for an old site https://kitsapchaptercu.org that is just for a once per year golf tourney. I can’t get my SSL settings to work. Bought an SSL certificate through my host and they say to add code to my site.
I don’t know what I’m doing and I’m not a developer, just created this site as a favor to my old boss. Here is what my host said to do:
Upon checking, I can see that your website application URL is currently set to HTTP. This is likely causing the “not secure” error. I have temporarily commented out the following code in the .htaccess file to prevent a redirect loop, which occurs because the application URL is set to HTTP. I recommend contacting your web developer to update the application URL to HTTPS.
Code:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
I think there’s two issues here you may need to solve.
The SSL cert on your hosting appears fine, it’s just Concrete needs a few tweaks:
-
I think your theme has hardcoded the url to a google font as http://fonts.googleapis.com/css?family=Exo:300
You’ll need to find that in your theme (likely in a header.php file) and update that to https://
-
I think your site config has http:// configured as the site’s url. As this is a 5.6 site, there should be a file /config/site.php, and in that I think you’ll find an entry for BASE_URL. That URL might need to be updated to be https
Ok I changed it to https but now my site doesn’t work.
That doesn’t look like the config file I’m talking about, it should be in a top level /config directory.
