Omnimaga

Omnimaga => Site Feedback and Questions => Topic started by: calcdude84se on August 03, 2011, 02:02:47 am

Title: SSL
Post by: calcdude84se on August 03, 2011, 02:02:47 am
Admins, any chance that Omni could also support SSL? (So that https://omnimaga.org/index.php (https://omnimaga.org/index.php) etc. work?)
Title: Re: SSL
Post by: Juju on August 03, 2011, 02:04:39 am
Netham45 would have to move his SVN server on another port and enable SSL on the web server. Dunno how feasible it is, it would be easy I guess.
Title: Re: SSL
Post by: DJ Omnimaga on August 03, 2011, 03:26:57 am
What would be the main use of this out of curiosity? I am unsure how this stuff works. I know https is more secure, but is it due to security issues you are facing?
Title: Re: SSL
Post by: Juju on August 03, 2011, 03:50:11 am
Well, https is more for security maniacs (which I am not), but I saw people (including myself) getting around restrictive firewalls with https (most firewalls doesn't take https in account). Also I'm working on a new feature that requires https.
Title: Re: SSL
Post by: DJ Omnimaga on August 03, 2011, 03:52:13 am
Ah ok that might be why. I hope his parents didn't do like Sircmpwn's or something X.x.

Also what is the new feature?
Title: Re: SSL
Post by: Juju on August 03, 2011, 03:59:10 am
Custom tabs for Facebook. You can already see it on our Facebook page (http://facebook.com/omnimaga). But the catch here, it requires Omnimaga to be https-enabled if you're viewing Facebook in https mode.
Title: Re: SSL
Post by: calcdude84se on August 03, 2011, 01:18:48 pm
Yeah, I'm not having any problems with anyone. I just like to use SSL, and, like Juju said, viewing Facebook in https makes all the other pages https too.
Title: Re: SSL
Post by: DJ Omnimaga on August 04, 2011, 04:54:04 pm
Ah ok. I guess maybe that could be added in the future.

Also Nice juju! You should really make a news about this or something, so people who didn't check in a while know and maybe also to remind people we got a Facebook page. Also I bet some might like to have Omnimaga news directly there.
Title: Re: SSL
Post by: Netham45 on August 26, 2011, 10:33:50 am
A bit of a necropost, but I enabled SSL a while ago. The downside is is that certificates are expensive, so anyone visiting will be getting an 'Invalid Certification' message they'll have to ignore.
Title: Re: SSL
Post by: DJ Omnimaga on August 26, 2011, 04:44:13 pm
Nice to hear Netham45 :D
Title: Re: SSL
Post by: jnesselr on August 28, 2011, 09:31:09 am
Oh noooes... The certificate is invalid! This site is dangerous! Should I proceed back to safety, or go into the lion's den.  I take a deep breath, gather my courage, and proceed anyway. I'm greeted with a strange site, a mysterious one.  It looks nothing like how I remembered it.  Then I realized I wasn't logged in.
Title: Re: SSL
Post by: annoyingcalc on August 28, 2011, 02:28:36 pm
Oh noooes... The certificate is invalid! This site is dangerous! Should I proceed back to safety, or go into the lion's den.  I take a deep breath, gather my courage, and proceed anyway. I'm greeted with a strange site, a mysterious one.  It looks nothing like how I remembered it.  Then I realized I wasn't logged in.

Yes why is it invalid?
Title: Re: SSL
Post by: calcdude84se on August 28, 2011, 02:29:28 pm
A bit of a necropost, but I enabled SSL a while ago. The downside is is that certificates are expensive, so anyone visiting will be getting an 'Invalid Certification' message they'll have to ignore.
Title: Re: SSL
Post by: annoyingcalc on August 28, 2011, 02:30:58 pm
oh ok
Title: Re: SSL
Post by: Ti-Programmer on August 28, 2011, 02:36:41 pm
Oh noooes... The certificate is invalid! This site is dangerous! Should I proceed back to safety, or go into the lion's den.  I take a deep breath, gather my courage, and proceed anyway. I'm greeted with a strange site, a mysterious one.  It looks nothing like how I remembered it.  Then I realized I wasn't logged in.

Yes why is it invalid?
a certificate has to be signed and up to date, like Netham45 said, they cost a lot of money, and its sorta useless, cause you don't absolutely need one.

EDIT: Dang, calcdude84se beat me
Title: Re: SSL
Post by: Darl181 on August 31, 2011, 03:24:05 pm
Hm, I got into the site without using a proxy at school so success in that :D

However, some little things....
OmnomIRC doesn't work, albeit my using an old version of chrome (12.0.742.122) while firefox takes its time updating on the USB drive.  I can click the chan tabs and they change, clear cookies, etc but the log won't load and the send button doesn't work.
Also, the login on the front page goes to the http version of the site, despite going there from the https page.
EDIT: the banner on top goes to the http version as well
EDIT2: omnomIRC showed in the login page, before I logged in ???

EDIT3: so I'm trying the https at home, and things seem normal for the most part.  Omnom works, the Quick Modify button is there, etc
So apparently it's trying to load stuff from the normal omnimaga, not the https, which is blocked so some things don't work :\
Title: Re: SSL
Post by: Netham45 on September 06, 2011, 10:50:51 am
I hadn't seen the edits to the previous post, so I overlooked it.

Due to the way that SMF and OmnomIRC, etc... work, they're not very SSL-friendly. OmnomIRC uses http://.. hard-coded in numerous places, and SMF wants it set to either HTTP or HTTPS in the config, and it returns links to pictures, etc... based off of what is in there.

I would move the site over to SSL, if not for the fact that an SSL cert costs so much. Making users get warnings about bad SSL certs seems like a bad idea.
Title: Re: SSL
Post by: DJ Omnimaga on September 06, 2011, 01:24:31 pm
Sorry to hear Netham45. Hopefully this won't be an issue for our members at school or home x.x
Title: Re: SSL
Post by: Darl181 on September 06, 2011, 02:25:49 pm
Ok then, I guess I'll just deal with the problems :P

In any case it works a ton better than through pretty much any (unblocked) proxy so yay
Title: Re: SSL
Post by: Darl181 on September 23, 2011, 02:51:36 pm
I was wondering why certain buttons work with SSL and why others don't.  Like, Modify and Quote show and work but Quick Modify isn't shown at all, and the "More attachments" button is borked as well :\
Would it be possible to fix a few of these?  Idk about the more attachments button but afaict the quick modify button just isn't showing..