The Reason for the Issue was https-redirection plugin. I wasnt aware there was https-redirection plugin installed. So, even though i checked wp-config.php & .htaccess for SSL redirects, the plugin was forcing SSL for CSS/JSS/images. I renamed the plugin folder and everything is proper now. sudo mv /var/www/html/wp-content/plugins/https-redirection /var/www/html/wp-content/plugins/STOP-https-redirection
How to move my local wordpress to https?
The values in wp_options should match exactly the URL you want to use to access the site. Without any specific configuration to do it, WordPress doesn’t care if it’s https or http as long as the settings match how you access the site. So you should change it to http until you get your SSL … Read more
There are two ways of seeting the Site URL. In the dashboard. In the wp-config.php file. In the functions.php file. If you cannot change Option 1 above, then you should NOT edit the table in PhpMyAdmin. Check for the following in wp-config.php: define( ‘WP_HOME’, ‘http://example.com’ ); define( ‘WP_SITEURL’, ‘http://example.com’ ); If you can’t find that, … Read more
Absolutely HTTPS. There’s no benefit to not using it, if it’s available.
I found that recently (Sept 30) the Let’s Encrypt Cretificates expired DST Root CA X3. In addition to the curl error 60 I also had Rest API errors and inability to updated plugins in wordpress. It is possible to update these in the wordpress installation: The patch is available here and should be available with … Read more
ERR_CONNECTION_REFUSED
My solution: openssl req \ -newkey rsa:2048 \ -x509 \ -nodes \ -keyout server.key \ -new \ -out server.crt \ -subj /CN=dev.mycompany.com \ -reqexts SAN \ -extensions SAN \ -config <(cat /System/Library/OpenSSL/openssl.cnf \ <(printf ‘[SAN]\nsubjectAltName=DNS:dev.mycompany.com’)) \ -sha256 \ -days 3650 Status: Works for me
If you have 5 web servers behind a load balancer (…) do you need SSL certificates for all the servers, It depends. If you do your load balancing on the TCP or IP layer (OSI layer 4/3, a.k.a L4, L3), then yes, all HTTP servers will need to have the SSL certificate installed. If you … Read more
It is probably possible, but if you do it the security impact is like not using ssl at all unless all you want to protect is your user and password and don’t care much about protecting against actual hacking into the site. While user and password are sent only as part of the login form, … Read more