WordPress Open full stop HTTPS

since CNNIC After the certificate issued by the sub-middle attack occurred in these events，SSL Connection and HTTPS Becoming more popular。This time we 'Use SSL to protect your login information, and background page"Into the recommended"SSL Everywhere”，Using global SSL encryption，Avoid disclosure of privacy caused by the user when accessing the page。and，According to the latest tutorial showing Google Webmaster among introduction，SEO is more beneficial to use https(Domestic forget it，However, Google's crawlers will reallyMore attention Https sites。）Other than that，Upgrade to Https，You do not need to Google Webmaster Tools, what did - support smooth upgrade，The only drawback is probably included in a short time will fluctuate。

Google supports smooth migration to the HTTPS

Here，We would like to thank StartSSL™ ，If not, they，I'm afraid we have these small owners personal blog bloggers to miss the SSL。。

due toFor this reason，Off the grid is not in use StartSSL a free certificate，But instead use concern Let’s Encrypt project，So you can easily get a personal certificate free。but，If you're like me is to throw in the blog Hosting，I thought you might needThis siteTo support virtual host cPanel and other background configuration。

How to apply for a certificate issue，Here Skip speak，In conclusion This article assumes that you have at least one valid signature certificate and the corresponding domain name。

HTTPS on that point had to talk things

HTTPS uses443portTo verify your links，Through SSL、TLS This low-level encryption technology to ensure that your connection is secure，Because the SSL protocol at this level IP，Therefore, to establish a secure handshake even exchange HTTP data has not happened，This leads SSL The domain name for itself signed certificate but you have a requirementIndependent IP address。but，Ruthless reality soon proved -IPv4 addresses will eventually be exhausted。Hosting emerged，At this time we are very fortunate we can have an independent domain name and space，But the IP address is shared。

Web server to provide different services on the same site on the same IP ports through distinguish requests from different domains，This leads to a serious problem：“SSL certificate is bound to whom?"The fact is indeed difficult to support SSL Hosting，Believe it will lead to other domain names with IP prompt certificate under the incorrect。but，Now the mainstream browsers support a new protocol：SNI。

Use SNI，It will allow the Web server to provide a separate certificate for each domain on the same IP。

So，If you want to bind multiple domains on one IP certificate，Or do you still use the Affordable Web Hosting，Wish to bind the certificate，Then you need to make sure your host can support SNI--Of course，For example, the current mainstream server Nginx、Apache So has support，With the exception of the roll is IIS Seemingly still not supported。

As your browser，Safari、Chrome、Firefox and other well-known browsers already support，Point name is seemingly IE series 5678 Not so good。

All right，Grilled over background，We started operations：

Since the grid is still a drop virtual host configuration，Here we talk about howUse cPanel to open SSL：

one、Open SSL access support

Your login cPanel，If your virtual host support SNI technology(See service providers to not to force），Then you should be in cPanel panel "Safety"Classification find inside."SSL/TLS"Function buttons。

"Security" category in the "SSL / TLS"

After clicking enter you will see a link to upload a public key and a private key binding domain，Upload turn into the，Then choose to bind the link in their binding domain "www"Can。(Here we must note，If you're using the same off the grid is a kind of certificate，Then you should not be eligible to sign pan-domain certificate，Naked domain should also not enough。）

After binding，Your blog should have been able to use to access the Https，but，Just the beginning。

two、Open access HTTPS 301 redirects

Careful you'll find at this time，While your site at this time to support the HTTPS access，But it seems you can also use HTTP to access，Taking into account the current search engines are included in your HTTP link，So if you do not do something, then I am afraid that this SSL certificate will be useless!

I hope you will be able to support space .htaccess ，If your blog, then opened the pseudo-static，That eighty percent of your space is supported。 ：）

We use .htaccess File to add a 301 redirect (in fact, there are various other ways to migrate，But Google uncle officialRecommended use 301 redirects) All of the HTTP traffic using 301 redirects to HTTPS to top，of course，Thus there is a potential problem：Domestic Baidu and other search engine crawlers do not support HTTPS！

I'm curious，Why in the world have advocated SSL Everywhere in the case of，China's domestic Internet environment or "expressly take the world"，of course，This may also with that "Girl Friend Wall"...... It has a relationship (otherwise it will not harmony ah ~) so，We also separately for some of the domestic search engine crawlers about custom rules，If the detected UA their，Then allow them to access the HTTP traffic。

In your blog space www Directory (some may be public_html )under，turn up .htaccess file，Edit it，Fill in the following code inside：

correct，Considering the huge hard IE uncle，We have excluded 12345678，Let them properly due to visit HTTP roll bar，Various provinces warning worry。

three、Open enforce SSL login and background

Although there has been redirected entire station，But we might still be WordPress It comes with its own function opens，Compatible with a view to better experience - after all 301s。

Still found inside the root directory of your website，The document is to be modified config.php，Directly at the end of this file on a new line，Two additional lines of code：

four、Site Links Support

The main problem may be the picture，You attachments have been uploaded to the space marked for WordPress absolute link，And they are all properly properly written "http://”。usually，Is the need to replace it with the database，However, this method is a little dangerous，I am here to give you recommend another good choice：Using the code allows WordPress before loading attachments will be replaced by a link like! --after all，Only a matter of protocol，Followed by the path is not half dime relationship ~

(I hope you are using WordPress subtopics function ......)

Found under the current topic function.php file，EDITORS '，At the end of the code inside append the following code：

Other than that，In addition to this main accident，You also need to be concerned about the various stations within the chain of：

• Edit "menu" among all "Custom Link" is a relative path；
• modify"Set up"→"conventional"inner"Site Address"and"WordPress address"As HTTPS；
• Other modifications absolute link address of its cheap hand written ......

Fives、Concerned about plug

Now，The last remaining issue：Plug compatibility！

Yes, that's right! Not all plug-ins are compatible with SSL!(Especially domestic plug)

correct! CNZZ statistics on this, then you only need to modify our code can statistical，The HTTP to HTTPS to modify。But more commonly used domestic JiaThis Social sharing widget on the weak，You can only afford to spareDelete stop。

Other than that，Before"I love boiled fish"Related Posts Plugin Development：WordPress Related Post，Later sold to foreigners，Always loads a link outside the station，Today also because Girl Friend Wall This problem led to a variety of chrysanthemum js script，I had decisivelyDelete stop。

You can use any browser，Open your blog page not open after an article，Select similar "Inspect Element"Operation，Check the error can be：There is no requirement for any red error，Yellow warning "⚠️" can be ignored。

Remove the plug on that function how to do?

Of course, is to find a replacement plug，As for the two plug-in here，Two plug-ins recommended route：

• anyShare It is a very simple and functional lightweight social sharing widget，Button is relatively large (you can see the end of this article later style)，Although it has not been updated for 10 months，But I assure you that this stuff is absolutely compatible with the latest version of WordPress and perfect function。：）
• Yet Another Related Posts Plugin This is another related article plugin，And could not stand the annoying external link，Functional free version enough，And the sameSupport RSS，And now it's configuration interface is no longer so daunting，correct! Although it is also compatible with the latest version is prompted not - but I guarantee，This same thing is functioning properly -

At last，You can go to this page to reference cells are used in which fallingMad pull cool hanging WordPress plugin，These plug-ins will be at leastSSL compatible 。

This time，Your blog should have been able to show a perfectLittle gray locksLa!

Ugh? ! Why gray? Contentment，Jiang Zi is a Class Certificate，Want Green，pleasePay。

correct，exist Chrome Under the green，but Safari Comparison pick，Is gray ~

Another：If your blog contains a link to a non-HTTPS under the same domain name，Chrome will be a yellow warning triangle，The Safari is not the same as an ordinary link the address bar displays a small lock。

Original article written by LogStudio：R0uter's Blog » WordPress Open full stop HTTPS

Reproduced Please keep the source and description link：https://www.logcg.com/archives/961.html