solved Some basic SSL questions with Jamroom hosting

alt=
K_K
@k-k
8 years ago
95 posts
I am looking to move Ning 2.0 site to Jamroom and would like to use SSL with it. I haven't used SSL before, so some basic questions:

I have currently a local provider that has a domain forward to the Ning site. I would like that to remain as it is, so the domain forward would change to mysite.jamroomhosting.com if I am understanding things right from other threads?

How does the SSL encryption work in this sort of arrangement?

What SSL certificates need to be bought? From whom?

Is the whole site encrypted? Or only some pages with password infos and such?
updated by @k-k: 01/01/17 02:31:30AM
michael
@michael
8 years ago
7,715 posts
SSL certs are free on Jamroom Hosting.

Would recommend you get a domain name though, so instead of using
mysite.jamroomhosting.com you use:
mysite.com

Here are the docs, start with the "Getting Started" section

Docs: Table of Contents
https://www.jamroom.net/the-jamroom-network/documentation/contents
alt=
K_K
@k-k
8 years ago
95 posts
Sorry I was a bit unclear, I got a domain name and there is a "domain forward" from my local service provider to the Ning site, so it shows up as www.mysite.com and I would like the Jamroom site do that also.

There was not much about SSL in the documentation and I am still unsure how it works. Is the whole site encrypted? Or just some pages?

I would like it to be as clear as possible to avoid any security related questions from users. And Google seems to be moving to favoring encrypted sites in it's search results also:
http://www.eweek.com/security/google-to-ramp-up-warnings-for-sites-that-use-http.html

For example here: https://pmp-art.com/ the front page comes up as not fully encrypted (and it even loaded a separate warning page on my phone browser), desktop Firefox giving it a "yellow lock" encryption and Chrome info button says that the page is encrypted but the info on pages could be changed. "Inside" pages of the site seem to get the encryption fully. That sort of thinks will probably bring out questions from users that I would rather avoid.
paul
@paul
8 years ago
4,326 posts
Checkout our Hosting documentation, in particular this page for how to point your domain to our servers - https://www.jamroom.net/the-jamroom-network/documentation/jamroom-hosting/3536/updating-nameservers-so-your-domain-is-live

I've checked out pmp-art.com on various browsers and on my iPhone and am not seeing any security or encryption issues?


--
Paul Asher - JR Developer and System Import Specialist
alt=
K_K
@k-k
8 years ago
95 posts
Well I get the "yellow lock" in latest Firefox version as in the attached picture (so some parts of the page are not encrypted). After logging in all inside pages get the "green lock."

But the Jamroom.net site gets the "green lock" in all pages, so there is something different how the encryption is done, just trying to figure out the differences.

Of course Jamroom probably does not have or need domain forwarding when you have your site on your own servers, but if I use forwarding will it cause something like this?

Sorry if this feels like unnecessary, like I said I a very novice about encryption.
scrcapture.PNG.png
scrcapture.PNG.png  •  3KB

douglas
@douglas
8 years ago
2,790 posts
You'll want to make sure all of your URL's, including image URL's, are using https: and not http:

Hope this helps!


--

Douglas Hackney
Jamroom Team - Designer/Developer/Support
FAQ-Docs-Help Videos
michael
@michael
8 years ago
7,715 posts
If you click the yellow lock it will tell you what the issue is:
https://support.mozilla.org/en-US/kb/mixed-content-blocking-firefox?redirectlocale=en-US&as=u&redirectslug=how-does-content-isnt-secure-affect-my-safety&utm_source=inproduct

Its saying "this page has some images that start with http:// but they should all start with https://".

The image its complaining about is a picture of a horse.
https://pmp-art.com/upimg/image/upimg_file/4301/512

The image IS on an HTTPS url, its just that the link to it points to http. very very insignificant. If the lock image is important to you, make sure you get all your URL's correct.