How To Convert Miva Site To All HTTPS

[lesliekirk]

If you're using the l.settings:record:link variable in the feed then your best option is to add the code above in the iterator template to replace http with https

If you want to hard code it, you need to essentially build their URL structure in the feed instead of using that record:link variable

https://www.domain.com/product/&mvt:record:code;.html

Where is the template for the Google Shopping feed? By the way, I am able to upload via the API and the file import.

[Brennan]

Ahh.. I think we're talking about two different things.

I're referencing Marketing -> Feeds

I think you're talking about Google Shopping, which does not use a feed. We directly connect via their API and push up products. Let me have our dev team see if there is an issue with https links using Google Shopping.

[ids]

Brennan,

Any thoughts for how 9.7 will affect or be affected by this https guide?

Thanks,

Scott

[Brennan]

Nothing in 9.0007 will change this tutorial.

[ids]

Thanks.

[TFo]

I'm a bit of a rewrite dummy. How do I set up the rewrite conditions, so I can still access my dev.domain.com store? The base sample is below.

RewriteCond %{HTTP_HOST} !^www\. [OR]
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://www.domain.com%{REQUEST_URI} [R=301,L]

Thanks,
Todd

[Bruce - PhosphorMedia]

change www to dev in the htaccess file that resides on the DEV server...however, unless you have a wildcard cert or a cert issued specifically to dev. you'll see security warnings as you browse.

[alphabet]

I haven't used them myself but there is a free, automated and open SSL certicates CA from Let's Encrypt. Over 100,000,000 issued.

[lesliekirk]

I haven't used them myself but there is a free, automated and open SSL certicates CA from Let's Encrypt. Over 100,000,000 issued.

I don't think they can be used with a Miva configuration, but David can chime in to set the record straight

[ILoveHostasaurus]

We don't currently allow the use of Let's Encrypt on our shared hosting servers because of how it works and the potential for outages as a result. We do let customers on dedicated servers choose to use it if they would like.

The issue is that Let's Encrypt issues short lived (90 day) certificates that require replacement before each expiration, so fairly often compared to a one, two or even 3+ year certificate. On a shared server where there are multiple customers, if many are using Let's Encrypt, then the server is going to have to be doing certificate replacements much more often than normal. Web server software requires a full restart when a certificate is replaced, so this means a stop and start (i.e. short outage) each time this replacement occurs. The larger issue is that if anything has gone wrong with the SSL configuration as a result of the Let's Encrypt automated tools doing their tasks, then the web server software may not start back up after the replacement, then all the sites on the server are down from the time this occurs until our techs are alerted and can then respond and correct. It seemed too great a risk to subject the subset of non-Lets Encrypt customers to when the cost of certs is so low, and they can be installed on subdomains independently of the main domain, so you don't need a much more expensive wildcard, just a second 'regular' cert issued to the subdomain name. We do not require the cert be purchased from us.

[Spinner]

Brennan, I am converting my store http://mydomain.html to https. In the rewrite code below, do I just I remove the www from my domain name on line 3? What do I do about the www on line one? Are there any other changes I need to make? Thank you in advance! Lois

RewriteCond %{HTTP_HOST} !^www\. [OR]

RewriteCond %{HTTPS} off

RewriteRule ^(.*)$ https://www.domain.com%{REQUEST_URI} [R=301,L]

[GDesigns]

Just as an FYI – we are available for https conversions and/or consultation. There is a bit more to it than just Miva setting changes, especially if you move from legacy short links or Sebenza short links to URI Management, etc.
Feel free to reach out if you have questions and/or need assistance.

[cpp-dev]

Are the dev stores also exempt from using Let's Encrypt?