OS2 World Community Forum

WebSite Information => Comments, Suggestions & Questions => Topic started by: Roderick Klein on January 23, 2018, 11:40:54 pm

Title: SSL OS/2world
Post by: Roderick Klein on January 23, 2018, 11:40:54 pm
While the postings on os2world.com are not really that secret. Is OS2WORLD.COM going to use SSL encryption ?
As in the near future web browsers such as Firefox will warn if a website does not use SSL. It might scare away users... Just a thought...

Roderick
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 24, 2018, 12:27:17 pm
Hi Roderick

I had read the news and I'm also concerned about this topic. I had chatted with the webmaster to check what are the options.

I have no idea about this subject or what are the required steps to get the ssl certificate, I also need to learn more about it.

Regards
Title: Re: SSL OS/2world
Post by: Ian Manners on January 24, 2018, 07:50:35 pm
Quote
what are the required steps to get the ssl certificate

<https://letsencrypt.org/>

Whoever looks after the server needs to install it :)
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 25, 2018, 01:49:13 pm
Hi

Kim (the webmaster) just installed an ssl certificate.

On the main page the firefox warning says that some parts of the site are insecure. I will check on that. Possible because I take parts of the forum and wiki on the main page.
On the forum it is working fine. The firefox warning says it is secure.
On the wiki it also says that parts of the site are insecure. But it also broke the layout of the page. I also got to check on that.

Regards
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 25, 2018, 03:18:18 pm
Hi.

I pinpointed the problem on the SSL's main page.

There is the block that says "Latest Forum Posts" if I turn it off the encryption padlock will turn green.

The warning on the console says:
"Loading mixed (insecure) display content “https://www.os2world.com/components/com_jfusion/images/new.png” on a secure page"

It is the "New" png file from the JFusion component that I use to merge users from Joomla, MediaWiki and SMFForum.

I'm checking my options here. Suggestions are welcome.

Regards
Title: Re: SSL OS/2world
Post by: Dave Yeo on January 25, 2018, 05:55:02 pm
Hi Martin. I'm getting a "Insecure information on this page was blocked" with buttons for "Keep blocking", "Unblock" and "Preferences" thingie at the top of this page with SeaMonkey and the padlock is yellow. The Error Console has this (for the Warp 3 Beep page),
Quote
Timestamp: 01/25/18 08:50:27 AM
Warning: Loading mixed (insecure) display content "http://www.amcgr.de/MR/Foren/ana767-200_detroit_intl_to_tokyo_narita.jpg" on a secure page
Source File: https://www.os2world.com/forum/index.php?topic=1628.0;topicseen
Line: 0
[\quote]
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 25, 2018, 06:00:22 pm
Hi Martin. I'm getting a "Insecure information on this page was blocked" with buttons for "Keep blocking", "Unblock" and "Preferences" thingie at the top of this page with SeaMonkey and the padlock is yellow. The Error Console has this (for the Warp 3 Beep page),
Quote
Timestamp: 01/25/18 08:50:27 AM
Warning: Loading mixed (insecure) display content "http://www.amcgr.de/MR/Foren/ana767-200_detroit_intl_to_tokyo_narita.jpg" on a secure page
Source File: https://www.os2world.com/forum/index.php?topic=1628.0;topicseen
Line: 0
[\quote]

That plane image is from other forum user. It seems that on his profile he is linking an image from another site. I will check if I had to block that on the forum script.

Regards
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 25, 2018, 06:40:46 pm
"Loading mixed (insecure) display content “https://www.os2world.com/components/com_jfusion/images/new.png” on a secure page"

Ok, I fixed that. I found that the plugins was pointing to http: instead of https: Now the on the main OS2World site the padlock is green.

Regards
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 25, 2018, 06:56:49 pm
The same thing applied for the wiki. I changed the configuration script to point to https:// and now it looks fine.
Now I will have to see why it points to some CreativeCommons in http://

Regards
Title: Re: SSL OS/2world
Post by: Dave Yeo on January 25, 2018, 07:07:35 pm
Still getting this when loading this page,
Quote
Timestamp: 01/25/18 10:03:56 AM
Error: Blocked loading mixed active content "http://www.facebook.com/plugins/like.php?href=https://www.os2world.com/forum/index.php?topic=1627&send=false&layout=button_count&width=100&show_faces=false&action=like&colorscheme=light&font&height=20"
Source File: https://www.os2world.com/forum/index.php/topic,1627.0.html
Line: 0
Title: Re: SSL OS/2world
Post by: ak120 on January 25, 2018, 07:40:06 pm
This forum also has a broken link to:
Code: [Select]
https://opi.yahoo.com/online?u=martiniturbide&m=g&t=0
Some referrers should be changed. But I think most users block the annoying tracking of this pages.

Now this page shows up more insecure in Firefox and is no longer useable with Netscape. A migration from "World" to village happened.
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 25, 2018, 08:12:46 pm
A migration from "World" to village happened.

Sarcasm does not help me.
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 25, 2018, 08:16:11 pm
Still getting this when loading this page,
Quote
Timestamp: 01/25/18 10:03:56 AM
Error: Blocked loading mixed active content "http://www.facebook.com/plugins/like.php?href=https://www.os2world.com/forum/index.php?topic=1627&send=false&layout=button_count&width=100&show_faces=false&action=like&colorscheme=light&font&height=20"
Source File: https://www.os2world.com/forum/index.php/topic,1627.0.html
Line: 0

Hi Dave, it seems to be the social network plugin of the SMFForum. I will look arround for some update.

Regards
Title: Re: SSL OS/2world
Post by: Dave Yeo on January 25, 2018, 08:29:18 pm
Is all this tracking needed? Unless it is providing you revenue, perhaps it could all just be gotten rid of.
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 25, 2018, 09:27:24 pm
Hi Dave.

The social network plugin was not for tracking. It is just to make "Like", "Tweet" or "+1" on each post. I had just disabled it since I didn't find a new version. It seems to me that was not used also.

Regards
Title: Re: SSL OS/2world
Post by: Dave Yeo on January 25, 2018, 10:03:38 pm
OK, thanks. I just assume that these sites are tracking as I know that they're very interested in tracking everyone.
The good news is no more warnings or errors in the console.
Unluckily, the padlock is still yellow. Might just be a subtle bug in the browser or perhaps restarting it will fix, I'll report if it does.
BTW, I currently have the os2world scripts blocked.
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 25, 2018, 11:35:58 pm
Hi Again.

The OS2World Wiki is now showing a green padlock and I also updated it to MediaWiki 1.30.0. The update was not that complicated and the wiki seems to work fine.

Regards
Title: Re: SSL OS/2world
Post by: Rich Walsh on January 26, 2018, 12:17:51 am
I'm getting the "You have requested an encrypted page that contains insecure information..." warning on a lot of the miscellaneous pages (Software News pages, Bounty System, etc). It's caused by this:
Quote
Timestamp: 01/25/18 06:08:33 pm
Warning: Loading mixed (insecure) active content "http://s7.addthis.com/js/250/addthis_widget.js" on a secure page
Source File: https://www.os2world.com/index.php?option=com_content&view=article&id=22029:drv32-2018-01-16&catid=80:software&Itemid=518
Line: 0

Also, while you're tweaking things, you may want to update your profile and get rid of the link to your AOL Instant Messenger account. May it Rest In Peace...
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 26, 2018, 03:42:02 pm
Hi Rich

I removed the IM stuff form the wiki, the links was useless. I also removed the social network pluggin from Joomla articles, until I get a newer/better one.

Regards
Title: Re: SSL OS/2world
Post by: ak120 on January 26, 2018, 05:58:12 pm
Hi Again.

The OS2World Wiki is now showing a green padlock and I also updated it to MediaWiki 1.30.0. The update was not that complicated and the wiki seems to work fine.
At least you tried without reading the Release Notes or checking the requirements. By this procedure you broke the stylesheets (MediaWiki:Common.css) you copied and pasted in summer 2017. For instance no bullets for unordered lists show up now.
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 26, 2018, 06:47:53 pm
Hi Andreas.

Your sarcasm / sharp comments are not helping.

There is a difference between saying:

Quote
At least you tried without reading the Release Notes or checking the requirements. By this procedure you broke the stylesheets (MediaWiki:Common.css) you copied and pasted in summer 2017. For instance no bullets for unordered lists show up now.

and

Quote
No bullets for unordered lists show up now. Please check that, it seems that the style sheets got broken. 

The second way is more efficient and it doesn't makes you look that bad.

Please post the links of the pages that are not working. MediaWiki replaced/changed the skin on newer versions.
Regards




Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 26, 2018, 07:01:32 pm
Hi.

It seems to be some issue with "Firefox 45.9.0" displaying the bullets of MediaWiki 1.30.0.
Update: Firefox 38.8.0 on OS/2 does not sees the bullets too.

Regards
Title: Re: SSL OS/2world
Post by: Martin Iturbide on January 26, 2018, 10:56:02 pm
Hi

I checked the "MediaWiki 1.30.0 bullets incident" on Windows, using Firefox 45.9.0 and the bullets shows in Windows.
My only guess is that there is a limitation on Firefox for OS/2 that does not allows that bullets to be displayed.

I'm attaching my four tests.

Regards
Title: Re: SSL OS/2world
Post by: Dave Yeo on January 26, 2018, 11:49:46 pm
Actually it may be a fontconfig issue. The bullets display fine in older versions of the browser that uses mzfntcfgft (SeaMonkey 2.28 or older) or the native font support (SeaMonkey 1.19). Images below.
(Warning, use a scratch profile for older versions of the browser)
Title: Re: SSL OS/2world
Post by: ak120 on January 27, 2018, 05:07:02 am
Quote
No bullets for unordered lists show up now. Please check that, it seems that the style sheets got broken.
That's not correct. I was talking about different issues and giving only one example. I cannot make any comment about relations. I don't know about the content of the configuration file or the server configuration.

To the facts:
Your Common.css (from 2017) tries to use the templates Editnotice‏‎ and Refbegin‏‎, which are not available.

Further you try to use extensions without the installation of the required backend libraries.
Especially GIF files will create a visual hell when resized.

The easiest workaround is to display a message to use older Mozilla builds for OS/2 or to migrate to Windows-based Mozilla applications which you're already using for editing.