No SSL on public website

[tothambrus11]

Hi, thanks for developing C2!

I noticed that the public website's SSL certificate is invalid, so only http:// is available on the public domain. If your hosting provider doesn't provide proper SSL encryption (for free), which also happened to my organization recently, I would recommend setting up a free CloudFlare domain proxy, which allows you to have http between your server and Cloudflare, while the connection between Cloudflare and the visitor goes through https. This at least provides a secure look in the person's browser and doesn't cause any troubles if they are visiting the site from a public place.

More info: https://developers.cloudflare.com/ssl/origin-configuration/ssl-modes/
(most likely the flexible encryption mode is suitable)

Let me know if you want to proceed with this, I might be able to help. It doesn't take too much effort but can be a bit of a puzzle when getting started.

[bvdberg]

Yes my hosting provider is charging 120+ euro per year for SSL certificates..

How would the domain proxy work? Do you forward my SSL traffic to Cloudflare?

[FinnT730]

Yes my hosting provider is charging 120+ euro per year for SSL certificates..

How would the domain proxy work? Do you forward my SSL traffic to Cloudflare?

Hi, I am not OP, but you can use Cloudflare for a free SSL certificate. If you link your site in Cloudflare, and change a few DNS namespaces on your domain registar, it should be properly linked in Cloudflare. the Free plan works fine for this as well.
It will handle the rest for you, in the background.

[tothambrus11]

Yeah exactly, I also use cloudflare free plan for some of my cheap hosting providers to get free SSL. It's fairly easy to set it up. There will be unprotected communication between your server and cloudflare, and a protected communication between cloudflare and your users.