# SSL - Will old full links with "http" work in the new ssl environment? **URL:** \ **Category:** RapidWeaver Classic\ **Created:** [February 28, 2017, 11:28pm UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785 "2017-02-28T23:28:20Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![1611mac](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/1611mac/32/5675_2.png) [@1611mac](https://forums.realmacsoftware.com/u/1611mac)\ **Post date:** [February 28, 2017, 11:28pm UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/1 "2017-02-28T23:28:20Z")
I’m planning an SSL install. During the “migration” period will old “http” full links work in the SSL environment?. (I realize I need to ensure any manual links are set to https or change to relative links, etc.) Or once SSL propagates will these old full “http” links return errors? ---
**Author:** ![teefers](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/teefers/32/8173_2.png) [@teefers](https://forums.realmacsoftware.com/u/teefers)\ **Post date:** [March 1, 2017, 12:02am UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/2 "2017-03-01T00:02:52Z")
Will probably cause errors or pages not to load. [https://www.whynopadlock.com/index.html](https://www.whynopadlock.com/index.html) If it’s a link leaving your site it would be okay but images CSS JavaScript etc all need to be https. ---
**Author:** ![1611mac](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/1611mac/32/5675_2.png) [@1611mac](https://forums.realmacsoftware.com/u/1611mac)\ **Post date:** [March 1, 2017, 12:16am UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/3 "2017-03-01T00:16:56Z")
Hi… thanks for the link to the tool… Appreciate it much. I finally made it thru the Chat Queue with my provider and they said it would resolve but with a warning… That’s fine as I should be able to fix the full links rather quickly. Againn… thank you for replying and thanks for the link. ---
**Author:** ![manofdogz](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/manofdogz/32/26314_2.png) [@manofdogz](https://forums.realmacsoftware.com/u/manofdogz)\ **Post date:** [March 1, 2017, 12:34am UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/4 "2017-03-01T00:34:04Z")
In my (limited) experience moving from http to https the old pages did not resolve from cached google search results - had to move quickly with htaccess to get them back. If your provider has something set up that’s useful - if not, the following script in htaccess should work (linux): RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(.\*)$ https://%{HTTP\_HOST}%{REQUEST\_URI} [L,R=301 ---
**Author:** ![1611mac](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/1611mac/32/5675_2.png) [@1611mac](https://forums.realmacsoftware.com/u/1611mac)\ **Post date:** [March 1, 2017, 2:01am UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/5 "2017-03-01T02:01:25Z")
Thanks for the rewrite rule… Appreciate it. ---
**Author:** ![1611mac](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/1611mac/32/5675_2.png) [@1611mac](https://forums.realmacsoftware.com/u/1611mac)\ **Post date:** [March 1, 2017, 2:06am UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/6 "2017-03-01T02:06:01Z")
I should add that my concern was more for what happens during population of the new “https” url where some requests may come in a “http” and some “https.” ie: No matter what I do I cannot perfectly “sync” anything I do to accommodate the change to “https” at the very instant it implements on various servers. ---
**Author:** ![teefers](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/teefers/32/8173_2.png) [@teefers](https://forums.realmacsoftware.com/u/teefers)\ **Post date:** [March 1, 2017, 4:16am UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/7 "2017-03-01T04:16:47Z")
Until you do a redirect any requests that comes in http should still function as a normal http request. Having the certificate allows you to use https and that allows the browser to show the user they are secure. It doesn’t force you to use https. You should still be able to access as http until you apply the redirects. So I wouldn’t apply the htaccess redirects until you clear up the http files in the site. ---
**Author:** ![jakobssystems](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/jakobssystems/32/2157_2.png) [@jakobssystems](https://forums.realmacsoftware.com/u/jakobssystems)\ **Post date:** [March 1, 2017, 5:22am UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/8 "2017-03-01T05:22:46Z")
Caution with mixed content via http and https. when transfering to https you should really check all your included assets, javascripts and frameworks they work on https aswell. otherwise your customers will get strange warning messages. It took me several days to check my own website and it made me to think about what 3rd party stuff I am using when it’s coming down to SRI (subresource Integrity). Though https alone doesn’t mean that a site is secure. I strongly recommend [observatory.mozilla.org](http://observatory.mozilla.org) and [ssllabs.com/ssltest](http://ssllabs.com/ssltest) as testing tools. ---
**Author:** ![dave](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/dave/32/147_2.png) [@dave](https://forums.realmacsoftware.com/u/dave)\ **Post date:** [March 2, 2017, 5:20pm UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/9 "2017-03-02T17:20:28Z")
Interesting @jakobssystems I tested several of my sites - across the board Mozilla rated them F while Qualys SSL Labs rated them A. And, it didn’t matter whether it was a very expensive certificate from Entrust - or a free one from Let’s Encrypt. ---
**Author:** ![jakobssystems](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/jakobssystems/32/2157_2.png) [@jakobssystems](https://forums.realmacsoftware.com/u/jakobssystems)\ **Post date:** [March 2, 2017, 5:45pm UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/10 "2017-03-02T17:45:15Z")
While SSLlabs checks web server’s SSL implementation, cert, ciphers etc. Mozilla does a broader approach and is aiming to developers and website creators taking advantage of the latest web security features. I named them both for two reason: 1. They do not work with fear. They just check your website and show you the results. Others try to offer you security products (like [sucuri.net](http://sucuri.net)) 2. Their test suits are transparent and under steady development. Mozilla is a brand I would give more attention than on any other SEO or security company. The mix of both ratings counts. My goal is to get at least an A on both… A+ is superb but sometimes not possible! Btw. there is no difference where your cert comes from or how expensive it was. If your server is misconfigured, sending old or unsecure ciphers to your clients than an expensive cert is rendered useless. I am using Let’s encrypt too and very happy with it. THis is my best website made with RW so far ;.) A+ on both… ![](https://europe1.discourse-cdn.com/flex005/uploads/realmacsoftware1/original/2X/9/9efdd0620dd5f28b8b9819c8197c47ef607d7df1.png) ---
**Author:** ![1611mac](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/1611mac/32/5675_2.png) [@1611mac](https://forums.realmacsoftware.com/u/1611mac)\ **Post date:** [March 2, 2017, 6:03pm UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/11 "2017-03-02T18:03:41Z")
Thomas… thanks for the links and info… appreciated. ---
**Author:** ![dave](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/dave/32/147_2.png) [@dave](https://forums.realmacsoftware.com/u/dave)\ **Post date:** [March 2, 2017, 6:04pm UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/12 "2017-03-02T18:04:57Z")
Awesome - can you elaborate on what steps you followed to pass: • Content Security Policy • HTTP Strict Transport Security • X Frame Options Many thanks! Dave ---
**Author:** ![jakobssystems](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/jakobssystems/32/2157_2.png) [@jakobssystems](https://forums.realmacsoftware.com/u/jakobssystems)\ **Post date:** [March 2, 2017, 6:26pm UTC](https://forums.realmacsoftware.com/t/ssl-will-old-full-links-with-http-work-in-the-new-ssl-environment/12785/13 "2017-03-02T18:26:26Z")
Hi Dave, there is no single switch or manual existing, it depends on the server and your website. Some settings can be done in Apache2 config files, some in .htaccess and the rest in your HTML code. Mozilla gives you a good start with their explanations and suggestions. There are several tools for setting up correct chiphers etc like [https://mozilla.github.io/server-side-tls/ssl-config-generator/](https://mozilla.github.io/server-side-tls/ssl-config-generator/) or to get correct hashes for SRI ressources [https://www.srihash.org](https://www.srihash.org) Here’s a good tool for CSP: [http://cspisawesome.com](http://cspisawesome.com) and finally here’s the registration for HSTS [https://hstspreload.org](https://hstspreload.org) Welcome to the journey to safety Dave!