SSL Turned on, but "not secure" when browsing

Classic
1

Hi, all, something broke my https connection - unfortunately, I don’t know what did it.

When I visit https://www.miraverde.de I get a “not secure” (or similar) notification in Safari (in Firefox, it’s just a crossed-out lock symbol).
I’ve looked everywhere - I have not http:// references. Period.
However, if I check the page with Firefox developer view, it shows me that there are plenty of http://loads:

SCR-20240222-qitz
SCR-20240222-qitz1732×528 93.2 KB

Oddly, the Brave browser tells me the site is secure and the certificate valid… I have cleared the cache on both Firefox + Safari… still getting a “not secure” warning.

I’m completely lost here, does anyone have any ideas?
Thank you!

1 Like
2

I just checked your site using Safari and it shows a valid certificate. The lock symbol displays correctly.

Screenshot 2024-02-22 at 12.45.33 PM
Screenshot 2024-02-22 at 12.45.33 PM846×170 8.87 KB

1 Like
3

Looks secure as long as you get there via an HTTPS call.
https://www.miraverde.de/
However, you can still get there with a straight HTTP URL
http://www.miraverde.de/
You should redirect all http calls to https using an htaccess fill.

2 Likes
4

Run the site through https://www.whynopadlock.com/

It will give you the code for your .htaccess file to force https and that should fix the issue.

4 Likes
5

Fantastic, thank you so much, Doug!
For some reason, the .htaccess file disappeared and the edit window in RapidWeaver was empty. I was able to roll back to the previous version within RapidWeaver, so I’m assuming something happened to it during an update. Very odd, but you saved the day!
BR Nick

1 Like
6

Thank you for checking - very odd indeed, that some browsers will show SSL working and some not.
The issue was caused by a missing .htaccess file.

7

Hey Rob, thank you for the URL, that site is new to me.
It generates a very specific .htaccess file. My “old” one was more generic, but seemed to do the trick (when available, LOL):

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
8

It’s a great site. I used to use it all the time.

1 Like