Page 1 of 2

TPFC migrated to HTTPS

Posted: Fri Oct 28, 2016 9:06 pm
by Andrew Lee
I have migrated TPFC to HTTPS using the free SSL cert service provided by the kind folks at Let's Encrypt.

Quite a bit of work was involved, and all the content that hard-coded HTTP as the protocol type had to be migrated to the protocol-less version if possible. This is to avoid the "mix-content" warning in browsers if not all content are served using HTTPS.

If you see anything wrong, please let me know. I hope my effort and our trouble are worth it for the extra security offered by HTTPS/SSL to all of us.

Re: TPFC migrated to HTTPS

Posted: Fri Oct 28, 2016 9:36 pm
by SYSTEM
Thank you, Andrew. :D

Re: TPFC migrated to HTTPS

Posted: Sat Oct 29, 2016 12:47 am
by SYSTEM
Problem: I get a 404 after I log out.

Re: TPFC migrated to HTTPS

Posted: Sat Oct 29, 2016 6:50 am
by smaragdus
I confirm what SYSTEM reported above- logging in and logging out result in 404 - Page Not Found error.

Re: TPFC migrated to HTTPS

Posted: Sat Oct 29, 2016 9:22 am
by Midas
Andrew Lee wrote:... This is to avoid the "mix-content" warning in browsers if not all content are served using HTTPS.
  • FYI, I'm getting this warning in SeaMonkey in a few forum topics... :|

Re: TPFC migrated to HTTPS

Posted: Sat Oct 29, 2016 9:57 am
by SYSTEM
Midas wrote:
Andrew Lee wrote:... This is to avoid the "mix-content" warning in browsers if not all content are served using HTTPS.
  • FYI, I'm getting this warning in SeaMonkey in a few forum topics... :|
It's most likely caused by forum posts which embed images from HTTP origins. Andrew can't do anything about that.

Re: TPFC migrated to HTTPS

Posted: Sat Oct 29, 2016 12:24 pm
by __philippe
smaragdus wrote:I confirm what SYSTEM reported above- logging in and logging out result in 404 - Page Not Found error.
Ditto here: (Garbled page after login / logout)
BTW, clicking on the top left TPFC logo does restore control to a clean page display mode....;-)

Image

Re: TPFC migrated to HTTPS

Posted: Sat Oct 29, 2016 1:00 pm
by Andrew Lee
I confirm what SYSTEM reported above- logging in and logging out result in 404 - Page Not Found error.
Fixed. Thanks for repoting!
It's most likely caused by forum posts which embed images from HTTP origins. Andrew can't do anything about that.
Yeah, that's the right answer.

Re: TPFC migrated to HTTPS

Posted: Sat Oct 29, 2016 1:28 pm
by smaragdus
Fixed. Thanks for repoting!
It is fixed, thanks.

Re: TPFC migrated to HTTPS

Posted: Sun Oct 30, 2016 9:31 am
by __philippe
Not clear if the following anomaly is related or not to the recent HTTPS migration:

While browsing TPFC anonymously,
any attempt to step-up an app popularity (by clicking on "This app rocks!" button) fails to bring up the customary CAPTCHA verification applet.

Subsequent attempt to click the "Submit" button rightfully brings forth the following (red colored) error message:
"The verification code is incorrect! Please try again. (reCAPTCHA said: incorrect-captcha-sol)"
Anyone else observing this issue ?

Re: TPFC migrated to HTTPS

Posted: Sun Oct 30, 2016 4:42 pm
by smaragdus
Portable Freeware Update sub-forum shows No posts. I see this for the first time.

Edit
I confirm __philippe's finding.

Re: TPFC migrated to HTTPS

Posted: Sun Oct 30, 2016 8:22 pm
by Andrew Lee
While browsing TPFC anonymously, any attempt to step-up an app popularity (by clicking on "This app rocks!" button) fails to bring up the customary CAPTCHA verification applet.
Fixed. Thanks!
Portable Freeware Update sub-forum shows No posts. I see this for the first time.
I can't reproduce this. Anyone else seeing this problem?

Re: TPFC migrated to HTTPS

Posted: Sun Oct 30, 2016 10:55 pm
by I am Baas
Andrew Lee wrote:
Portable Freeware Update sub-forum shows No posts. I see this for the first time.
I can't reproduce this. Anyone else seeing this problem?
Yes
PW20161031_142055.png

Re: TPFC migrated to HTTPS

Posted: Mon Oct 31, 2016 2:05 pm
by Andrew Lee
Noted. I will look into this.

Re: TPFC migrated to HTTPS

Posted: Mon Oct 31, 2016 2:16 pm
by Andrew Lee
Seems like there hasn't been any new post since Oct 29.

Anyway, I posted a test post in the 1by1 topic to check. The field was immediately updated.

Strangely, after I deleted my test post, the field didn't go back to "No post". Instead, it is now showing "Oct 29".

Anyway, looks like problem fixed.