How Configure Blesta With Ssl Properly

[alexistkd]

Hi im trying to configure ssl with blesta but in my browser stills shows like: the connection to this website is not fully secure what do u guys recommend me to make fully secure my blesta installation i have already a rapidssl certificate for my domain.

 

thank you.

[Michael]

Have you got this in your .htaccess?

RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=307,NE,L]

That will force SSL On your Blesta installation and we use it.

[alexistkd]

yeah but when i write http://mydomain.com it doesnt redirect instead is showing a 404 error

[alexistkd]

nevermind i just restarted apache now its working

 

thank you

[jwogrady]

Okay...  Doesn't everyone use SSL?   Can we please add this to the documentation.  Better yet, let me check ssl next to my url in the general settings.

 

EDIT --  My bad...  looks like this is done by default.   So the fact that it's not directing probably has something to do with my server....

 

EDIT2 ---  On closer look, the issue was that the .htaccess rules in my Blesta install directory were commented out.

 

Changed

 

#RewriteCond %{HTTPS} !=on

#RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=307,NE,L]

 

to 

 

RewriteCond %{HTTPS} !=on

RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=307,NE,L]

 

All good now.

[Michael]

  On 7/30/2014 at 5:22 AM, jwogrady said:

Okay...  Doesn't everyone use SSL?   Can we please add this to the documentation.  Better yet, let me check ssl next to my url in the general settings.

 

It is  http://docs.blesta.com/display/user/Installing+Blesta#InstallingBlesta-ForcingHTTPS

[Paul]

Looks like this is resolved, but just to add.. the reason the lines are commented out by default is that we'd get a lot more complaints about things not working if we forced SSL out of the box. Everyone should use SSL for their Blesta installations, but many do not, or they set it up after installation is completed.

[hpno]

Sorry to take this old topic, but I just installed SSL for my Blesta at https://domain.com/blesta/, and add .htaccess file with above content. However, it seems only loading the default theme, and I cannot login to admin anymore. It always comes back to default portal.

 

So, is the code above working with blesta installed in a sub-folder?

 

Thanks.

[Michael]

It should work are you using Nginx?