Powered by eUKhost®

Announcement

Collapse
No announcement yet.

https from http

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • https from http

    Can i change my site from http to https if on a shared server? I don't actually conduct money transfers/payments so not after any large compensation/cover.
    Eukhost suporter

  • #2
    Re: https from http

    Hi Paul,

    Yes, this is possible on shared hosting. However you'll need to purchase an SSL certificate to do this as browsers require one to be presented whenever it attempts to connect to a website over HTTPS. You can find out more about SSL certificates here: https://www.eukhost.com/ssl-certificates.php

    We offer free SSL certificate installation on purchase. If you need help installing your certificate after purchase, simply submit a ticket and our team will do the rest.

    Once your SSL cerificate is installed, you'll be able to access your website over HTTPS. If you want to force all traffic to go over HTTPS, you need to add the following rules into a .htaccess file in your public_html directory. If you have multiple websites hosted on the same shared hosting account as separate Addon Domains, you should instead add these rules into the .htaccess file in the home directory of the addon domain that is being switched over to HTTPS (e.g. if your domain is example.com, that might be /home/public_html/example.com/.htaccess).

    To force HTTPS to a URL with "www" (e.g. http://example.com to https://www.example.com):

    Code:
    RewriteEngine On
    RewriteCond %{HTTPS} off
    RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
    RewriteCond %{HTTP_HOST} !^www\.
    RewriteRule .* https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
    To force HTTPS to a URL without "www" (e.g. http://www.example.com to https://example.com):

    Code:
    RewriteEngine On
    RewriteCond %{HTTPS} off
    RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
    RewriteCond %{HTTP_HOST} ^www\.(.*)$
    RewriteRule ^/(.*)$ http://%1/$1 [L,R=301]
    Note: These htaccess rules have not been tested and therefore cannot be guaranteed to work or not cause problems. Use at your own risk.
    Find us on Twitter and Facebook

    Need to contact us?
    Customer Support: Client Area - 0800 862 0380 (option 2)
    Customer Relations: [email protected] - 0800 862 0380 (option 3)
    Sales: [email protected] - 0800 862 0380 (option 1)




    The opinions or views expressed above are not necessarily the opinions or views of eUKhost Ltd.

    Comment


    • #3
      Re: https from http

      Thanks Ben, So Alpha SSL without wildcard would make all my pages under my domain .co.uk https: i.e https://www.mysite.co.uk/allotherpages.html
      Does my site just move to another server, and if i never forced to redirection, it would still just use the http

      Currently i have a dedicated IP, will this mean i don't really need the dedicated IP?

      And what does 5 Minutes Issuance Speed mean?
      Eukhost suporter

      Comment


      • #4
        Re: https from http

        Originally posted by paulpa66 View Post
        Thanks Ben, So Alpha SSL without wildcard would make all my pages under my domain .co.uk https: i.e https://www.mysite.co.uk/allotherpage.
        Yes that's right. All of our SSL certificates also secure both www and non-www versions of your domain. The only thing to bear in mind is the protection of sub domains. If you need to protect sub domains, e.g. forums.example.com, blog.example.com and so on, then you will need to look at a Wildcard SSL certificate, as this protects both the domain name and any number of sub domains of the same domain.

        For an Alpha SSL (and any other non-Wildcad SSL), it'll apply to:For an Alpha Wildcard SSL (and any other Wildcard SSL), it'll apply to all the above scenarios but also any sub domains, like:
        Originally posted by paulpa66 View Post
        Does my site just move to another server
        You don't need to move servers to use HTTPS. We simply install the SSL cerificate in your cPanel account and it'll start working immediately.

        Originally posted by paulpa66 View Post
        if i never forced to redirection, it would still just use the http
        Yes. If you don't force HTTPS redirection, users have to directly visit your website (or click on a link to a page on your website) that uses "https://" instead of "http://".

        Originally posted by paulpa66 View Post
        Currently i have a dedicated IP, will this mean i don't really need the dedicated IP?
        We no longer offer free Dedicated IPs on our SSL certificates as they are wholly unnecessary nowadays. If your website uses the Shared IP of the server, you can continue using that even if you have an SSL certificate assigned to your domain. You only need a Dedicated IP if you need to support really old browsers/operating systems:

        "Some obsolete software do not support a TLS extension called Server Name Indication (SNI), which helps your browser or device identify which domain the secure connection is to be established with. This becomes necessary when an IP is shared across multiple domains. Unless you need to support obsolete software that do not support SNI, a dedicated IP is not needed."

        You can see a list of such "obsolete software" here (e.g. Internet Explorer 8 on Windows XP).

        If you want to use a Dedicated IP (realistically, most people don't need to), you'll either need to have one not already used or you can purchase one from us for 20/yr. In any case, ordering your SSL certificate is exactly the same. You just need to let us know what domain name you want the Dedicated IP to be assigned to and our team will do the rest.

        Originally posted by paulpa66 View Post
        And what does 5 Minutes Issuance Speed mean?
        It means your SSL certificate will be issued by Alpha within 5 minutes of us approving your order.

        If you have any further questions, please do not hesitate to respond.
        Find us on Twitter and Facebook

        Need to contact us?
        Customer Support: Client Area - 0800 862 0380 (option 2)
        Customer Relations: [email protected] - 0800 862 0380 (option 3)
        Sales: [email protected] - 0800 862 0380 (option 1)




        The opinions or views expressed above are not necessarily the opinions or views of eUKhost Ltd.

        Comment


        • #5
          Re: https from http

          Originally posted by Ben View Post

          You can see a list of such "obsolete software" here (e.g. Internet Explorer 8 on Windows XP).

          If you want to use a Dedicated IP (realistically, most people don't need to), you'll either need to have one not already used or you can purchase one from us for 5/yr. In any case, ordering your SSL certificate is exactly the same. You just need to let us know what domain name you want the Dedicated IP to be assigned to and our team will do the rest.
          Thanks Ben, not sure about the 5 i,m being charged 20.
          So what would happen to an xp user visiting site over ssl with no dedicated IP, still a lot of them about
          Eukhost suporter

          Comment


          • #6
            Re: https from http

            Originally posted by paulpa66 View Post
            Thanks Ben, not sure about the 5 i,m being charged 20.
            Whoops, it's actually 20 a year for a Dedicated IP. I mistakenly quoted the price for Domain ID Protection, which is 5 a year. Sorry for the confusion there.

            Originally posted by paulpa66 View Post
            So what would happen to an xp user visiting site over ssl with no dedicated IP, still a lot of them about
            It's only Internet Explorer on Windows XP that is affected. Firefox 2 or higher or Chrome 6 or higher are unaffected. To give you an idea of timeline, Firefox 2 was released on October 24, 2006 - almost 9 years ago.

            As an online company, we obviously need to support a wide variety of browsers and devices to maximise compatibility, and I can tell you we no longer test our website against Internet Explorer 8 because the usage share is so low.

            What I would recommend you do is check your traffic data (e.g. with Awstats) and see how many users visit your website using Internet Explorer on Windows XP. This should help you to choose whether or not it is worth having a Dedicated IP for this purpose. I should also clarify Internet Explorer 8 on Windows Vista is not affected.
            Find us on Twitter and Facebook

            Need to contact us?
            Customer Support: Client Area - 0800 862 0380 (option 2)
            Customer Relations: [email protected] - 0800 862 0380 (option 3)
            Sales: [email protected] - 0800 862 0380 (option 1)




            The opinions or views expressed above are not necessarily the opinions or views of eUKhost Ltd.

            Comment


            • #7
              Re: https from http

              Originally posted by Ben View Post
              What I would recommend you do is check your traffic data (e.g. with Awstats) and see how many users visit your website using Internet Explorer on Windows XP. This should help you to choose whether or not it is worth having a Dedicated IP for this purpose. I should also clarify Internet Explorer 8 on Windows Vista is not affected.
              OK will do. Just updating all the pages on my site locally with relative links, removing any http, also updating all my canonical from http to https.

              I,ll order this then when i,m ready to upload all my pages again. I guess then i can use the htaccess code above after i have the ssl sorted, then just do change of address in Google Webmaster tools to https?
              Eukhost suporter

              Comment


              • #8
                Re: https from http

                Originally posted by paulpa66 View Post
                OK will do. Just updating all the pages on my site locally with relative links, removing any http, also updating all my canonical from http to https.

                I,ll order this then when i,m ready to upload all my pages again. I guess then i can use the htaccess code above after i have the ssl sorted, then just do change of address in Google Webmaster tools to https?
                Hi Paul,

                You can't yet change the address of your website from HTTP to HTTPS via Google Webmaster Tools (see article), but Google will know about the change fairly quickly as it crawls your website. You may also notice we are using a 301 redirect in the htaccess rules above, which is a permanent redirect. This means Google will treat the new URL (HTTPS) as the replacement for the old URL (HTTP). You can read more about server-side 301 redirects here: https://support.google.com/webmaster...er/93633?hl=en

                Note: If your website calls external JavaScript or CSS resources, make sure the protocol is changed from "http://" to "https://", or remove "http:" entirely so it becomes a protocol-less URL like this:

                HTML Code:
                <script src="//www.example.com/cdn/script.js">
                When a URL is expressed like this, the browser determines the protocol (HTTP or HTTPS) from the web page itself. So if your website is being accessed over a HTTPS connection, the URL of the script above would be https://www.example.com/cdn/script.js.
                Find us on Twitter and Facebook

                Need to contact us?
                Customer Support: Client Area - 0800 862 0380 (option 2)
                Customer Relations: [email protected] - 0800 862 0380 (option 3)
                Sales: [email protected] - 0800 862 0380 (option 1)




                The opinions or views expressed above are not necessarily the opinions or views of eUKhost Ltd.

                Comment


                • #9
                  Re: https from http

                  Originally posted by Ben View Post
                  Hi Paul,

                  You can't yet change the address of your website from HTTP to HTTPS via Google Webmaster Tools (see article), but Google will know about the change fairly quickly as it crawls your website. You may also notice we are using a 301 redirect in the htaccess rules above, which is a permanent redirect. This means Google will treat the new URL (HTTPS) as the replacement for the old URL (HTTP). You can read more about server-side 301 redirects on here: https://support.google.com/webmaster...er/93633?hl=en
                  Ben yes was reading that "Redirect your users and search engines to the HTTPS page or resource with server-side 301 HTTP redirects."

                  and the code you put am i right in thinking that redirects like for like so any page that wass http goes to corresponding page but with https, so that way i don't have to physically redirect every page one by one.

                  So code takes http://www.mysite.co.uk/test.htm to https://www.mysite.co.uk/test.htm and so on for all pages.
                  Eukhost suporter

                  Comment


                  • #10
                    Re: https from http

                    Originally posted by paulpa66 View Post
                    Ben yes was reading that "Redirect your users and search engines to the HTTPS page or resource with server-side 301 HTTP redirects."

                    and the code you put am i right in thinking that redirects like for like so any page that wass http goes to corresponding page but with https, so that way i don't have to physically redirect every page one by one.

                    So code takes http://www.mysite.co.uk/test.htm to https://www.mysite.co.uk/test.htm and so on for all pages.
                    Yes, that's right. As you can see in the htaccess code in my post above, REQUEST_URI is a htaccess variable that contains the part of the URL that corresponds with the page that the user is attempting to visit. In the example below, the bolded part is the REQUEST_URI:

                    https://www.example.com/forums/login.php

                    In all cases it is recommended you test the htaccess rules to make sure they work as intended. I always check to make sure all my pages are working as usual if I am adding any htaccess rules that involve redirections. Mistakes can happen.
                    Find us on Twitter and Facebook

                    Need to contact us?
                    Customer Support: Client Area - 0800 862 0380 (option 2)
                    Customer Relations: [email protected] - 0800 862 0380 (option 3)
                    Sales: [email protected] - 0800 862 0380 (option 1)




                    The opinions or views expressed above are not necessarily the opinions or views of eUKhost Ltd.

                    Comment


                    • #11
                      Re: https from http

                      Thanks Ben
                      Eukhost suporter

                      Comment

                      ban-img
                      Working...
                      X