This site is not secure

[alex4orly]

A new website I established here : http://probusashburton.org.au/
Visitors are getting this message - This site is not secure when visiting it.
Is there anything I can do about it?

Have seen it before with Firefox, but it is unknown who is visiting the site, I can't tell them all how to set up their browser...

Any suggestions?

[angd]

you need to install ssl certifcate and have your http redirect to https. This will make it secure and its becoming a thing for google search. the unsecure site notification will become more pronounced in teh future, best to fix it now. Ususally your hosting provider can help with this. Be aware that you might have to change links internally and externally that are present on your site. what you want to achieve is the green paddlock. I recently did it with my site. take a look and click on the green padlock or the word secure. site is http://www.angel.com.au

Hope that helps

[alex4orly]

Hi Angel,

Thaks for the feedback, I don't see any green padlock on that page
Also, the URL you provided is http:// not https://

Can you give me some hint as how to go about it?

Cheers

[angd]

when you click on the link i gave you you should see it as https: on your browser (to show the redirect effect). you can still just enter www.angel.com.au as well and there should be a paddlock or the word secure to the left of the url. If not clear your cache or use a different browser. talk to your hosting provider and ask them if they can help you install ssl certificate. hopefully they will support lets encrypt which is free. then you need redirects in the .htaccess file. ask them if they will do that for you. for your information i had a host in the usa that would not do that for another site of mine. changed hosts and the new one did it for me.

[BaconFries]

Alex have you recently installed a ssl certificate to your site? have you configured it correctly on your host? are you on a shared hosting? What is the exact error message other than just "This site is not secure". Please note that this is not related to the software at all but with the ssl certificate (if installed) and how the browser reads it.
I would go check the validity of the certificate (if instaled) asking your host for assistance with this as it is not related to the software. If it is members of your community then you can tell the user/visitor to clear there cache and then try again. As mentioned it is for you to check for issues with the sites security certificate and that of the trusted root certificate for the (CA) Certification Authority on the site.

[alex4orly]

OK, I now noticed that paddlock...
Can you give me here the lines in your .htaccess and I will try

Cheers

[angd]

alex the best way to do this is to talk to your hosting provider to see if they will help you with the ssl certificate and the redirects. Talk to the technical support of your hosting provider. This is the best way to do it.

good luck with it

[alex4orly]

Hi guys,
Just finished an online chat with the host company (Netregistry), I get the following error:

Your connection is not private
Attackers might be trying to steal your information from probusashburton.org.au (for example, passwords, messages, or credit cards). Learn more
NET::ERR_CERT_AUTHORITY_INVALID

Their answer is that : Unfortunately, the Self Signed SSL certificate is not supported... And If I wish I need to purchase a certificate at $199 p/a for the site

Any comments?
Thanks

[BaconFries]

Search 'Google' for a cheaper alternative price to which your host is asking. Don't use a self signed certificate as they can easily be created by a attacker and made to look as if it is from your site when not!. Do you actually need one? are you storing sensitive information in a database by sensitive ie users credit card details, racial or ethnic origin; political opinions, date of birth etc etc or is it simply login information such as email and username? if the later I would save yourself money and not use one. But its entirely up to you and if you feel it worth the outlay search for a alternative seller at a cost you can afford and that your host will allow you to install.

[alex4orly]

Baconfries,
There is nothing important on this website, no databse...
It is just a Retired people club website which I did for them as a donation
But, they are now all afraid to access the site becasue of that warning coming up...

What can I do?

Cheers

[BaconFries]

Don't know if anything can be done apart from going to the extreme of doing a reset of your hosting account to take it back to as it was when you originally purchased!. Have you removed the self signed certificate and all traces from your host/server?. Have your tried deleting your site from the server and reuploading without any references to 'https' this would be all urls/links, images with the https reference etc. Maybe call a community meeting or put out a written letter/email to everyone saying it safe and how to clear there browsers cache so that this won't show!. On a funnier side emigrate (sorry I know it not funny) wish I could at the moment due to being snowed in. Anyway try to reinsure all the members/users that it is safe to use and they have nothing to worry about here's hoping you can resolve this soon.

[alex4orly]

This is a new site I did fo rthe club and published just 2 weeks ago
I have no references on it to https as far as I know...
Will wait to hear back from my host company

Thanks again