homestead_faq's profileBrand User

677 Messages

 • 

44.6K Points

Monday, February 26th, 2018 10:46 PM

Can I Secure My Homestead Website With HTTPS?

Can I Secure My Homestead Website With HTTPS?
For SITEBUILDER PLUS ONLY. Do not use if you have Website Builder.

If you have a Simplestore using Sitebuilder Plus, DO NOT PROCEED WITH THIS PROCEDURE.
For more information please read this topic
:

https://community.homestead.com/homestead/topics/cloudflare-common-cloudflare-issues


Important: When we update the nameservers, it is possible to see some interruption with the website and email as the settings propagate. This is to be expected, but if it has been more than 24 hours, please contact support and we can assist.

*click on images to enlarge*

This topic addresses displaying a "secure" rating in the address bar. Currently your site shows an information icon to the left of your URL. If you click it, the message will say the site is not secure.


If you have a contact form this is important. As soon as you begin filling in a field in the form, the browser will display a more obvious message in the address bar.


To secure your site you will need to update your nameservers using Cloudflare. Below are detailed instructions on correctly configuring this so your website will be secure and your customers will feel more confident providing you their contact information.

1) Go to http://www.cloudflare.com and click on the sign up link.


2) Please enter your email address and password you wish to use for your Cloudflare account. If possible, please do not use an email address connected to your domain.
We strongly recommend you read the term and conditions. To continue you must agree to the terms and conditions by clicking on create account.


3) Enter your domain name and click on Add site

4) Select the FREE plan and click Confirm Plan.



5) Cloud flare will scan your current DNS settings and automatically populate the found DNS records. When the scan is complete, and you see all records present, click continue .




6) Compare the DNS records Cloudflare scanned to your existing DNS records. These can be found in your Homestead account, under Domains > Advanced DNS settings. They should match. If they do, click Continue.


If they don't, you can click on the name or value inside of Cloudflare that is incorrect and edit it. If you need help viewing your current DNS records, please see our topic, How can I view and edit my DNS records using Homestead nameservers.



NOTE: Please make sure to verify that the MX record has been added inside of CloudFlare's DNS settings. If you do not see a record with MX next to it, then we will need to add the MX record.


Click MX in the drop down, then click Name and type @, then Click to configure just right of that box. It will open a new window, please confirm your MX record.
If you are using email with Homestead, for server you will add mx.YOURDOMAIN.com, and for Priority you can put 10. Click save, then click Add Record.


7) Cloudflare will now provide you the new nameservers for your domain. If you do not see your nameservers, proceed to the DNS page inside of Cloudflare, and scroll down until you see Cloudflare Nameservers.

Important: When we update the nameservers, it is possible to see some interruption with the website and email as the settings propagate. This is to be expected, but if it has been more than 24 hours, please contact support and we can assist.



8) Log into your Homestead account and click the domains tab on the left. Under the domain you are working on, click Edit your nameservers. You will need to click delete next to ns3.mdnsservice.com and then change the other 2 nameservers to the ones provided by Cloudflare. You can't change and delete in the same step, so you will need to click edit twice. Click Submit


9) Return to Cloudflare and click done check nameservers.



10) The first part is now completed. Now, please review and confirm that the SSL is set to Flexible and always use HTTPS is turned on. 



11) Over the next 24 hours, try manually typing in your site with https. If it isn't set up yet, you'll get an error page. Just type https://www.yourdomain.com  and when you see your site load with HTTPS, please proceed to the next step.


NOTE: Do not proceed to the next step until you can view your website when using HTTPS (https://www.yourdomain.com) When you see your site load with HTTPS, continue to step #12.

12) Click on the SSL/TLS button at the top and select Edge Certificates. 



13) Scroll down on this page and look for the section entitled "Always use HTTPS" Turn it on. Also scroll to the bottom and find "Automatic HTTPS Rewrites" Turn it on. All other settings you can leave as default.




In a few minutes, your site will show secure.


If your site is not showing fully secure, please go republish your site.


Note: This solution is for Sitebuilder Plus sites only.

3 Messages

 • 

152 Points

6 years ago

This reply was created from a merged topic originally titled how do I make my web site with you a secure web site.

http://www.reelsportfishingcharters.com

2 Messages

 • 

142 Points

6 years ago

This reply was created from a merged topic originally titled How do I convert to https.

So how do you convert the website over to HTTPS?

Note: This conversation was created from a reply on: How do I make my site secure.

2 Messages

 • 

120 Points

6 years ago

Hello I followed your instructions regarding securing my account using cloudflare... It's been 48 hours since cloudfare informed my website was active, but my site will not come up. Showing a "website coming soon message".  I log into my cloudflare account and it say my website is active... Please instruct  www.denversconcrete.com

1.4K Messages

 • 

262.9K Points

veronica4546, In your Cloudflare account, go to the DNS settings and change the IP address for the @ record from  216.40.47.17to 146.148.102.201. If all the other settings are the same as these instructions it should resolve the issue. Otherwise, please go through these steps again and make sure all the settings are correct. Since you changed the nameservers back, I am no able to see the results.

8 Messages

 • 

234 Points

6 years ago

This reply was created from a merged topic originally titled Kindly please secure my site Afnetimex and your data with HTTPS..

Unable to open mail contact links on my website 
Brand User

1K Messages

 • 

30K Points

The links are something different that I replied to from your other post. At the moment, we recommend using this solution to allow your website to be SSL protected.

5 Messages

 • 

250 Points

6 years ago

Hi, thank you for the trick and all the comments.

It worked for my site www.ardilalaw.com. My site  is showing on a https. But, chrome says the connection is in status of “Info or Not secured”. It does not say it is a dangerous connection, just not quite secured. 

How to I upgrade to “Secure”?

Thanks is advance

Brand User

1K Messages

 • 

30K Points

I do see the page is loading with the HTTPS, but the error you are seeing is because of the HTML on your website. This is a known issue that we are hoping to see resolved real soon.

5 Messages

 • 

250 Points

Any updates?

1.4K Messages

 • 

262.9K Points

I would try removing all the HTML boxes on one page and see if it shows secure then. It should if your Cloudflare is all set up correctly. Then add them back, one at a time. When you find the one(s) causing the problem, see if they have updated code or omit that box from the page if that is not possible.

2 Messages

 • 

120 Points

6 years ago

Using the https connection the facebook like button and comments plug-in (at the bottom of the home page) won't load in. Is there any options in cloud flare to allow those?
https://www.ehlencontracting.com/
Brand User

1K Messages

 • 

30K Points

We have a ticket placed regarding Facebook elements not connecting. I am not entirely sure if it is also related with the recent privacy issues with Facebook and pending updates, but I will include your site info into the ticket as well.

1 Message

 • 

110 Points

6 years ago

Is there any update on this? Neither of those threads you link to have any info. I've tried the CloudFlare solution but BigCommerce won't let me edit my NS entries. I'm also on the legacy admin of BigCommerce (not sure why or how to upgrade that) and none of their SSL solutions appear to be available to me. 

2 Messages

 • 

142 Points

6 years ago

I have followed the instructions above, including turning on Automatic HTTPS Rewrites on Cloudflare, but I am still getting "mixed content" errors for the images and it looks like javascripts, too. Please see https://www.mjrichlawoffice.com/

It's been over 24 hours since I set up Cloudflare.
Brand User

1K Messages

 • 

30K Points

Can you try to re-publish your website for me?

2 Messages

 • 

142 Points

That seems to have fixed it. Thank you.
Brand User

1K Messages

 • 

30K Points

Awesome!

149 Messages

 • 

7.6K Points

Hi Todd...we are having a similar problem.  The conversion to Cloudflare went fine with the exception that elements such as our Twitter feed, and a form that was created using Formsite (an HTML code embedded into a page) no longer work.  

The following image shows the error we now have since we completed the Cloudfare instructions.  

Brand User

11K Messages

 • 

145.1K Points

Hello  david2953

This is an issue that we are seeing with social media elements like Facebook or Twitter, as well as HTML elements like 3rd party forms. We have escalated the issue to our dev team and they are working on fixing this. We are in the process of getting SSL implemented on our end and this is one of the issues we are seeing in the process. We will definitely keep everyone updated with any changes.

10 Messages

 • 

534 Points

6 years ago

I follow the Cloudfare instructions up to the "DNS Modifications Instructions." On the Homestead pages, I don't see any addresses that look like this instruction illustration, but only "finalexitnetwork.org (pointed domain)", so where do I put the new information to redirect? It says to remove the named server "ns2.mdnsservice.com" and change "ns3.mdnsservice.com" and "ns1.mdnsservice.com" to ns1.mdnsservice.com and owen.ns.cloudflare.com respectively. Am I being too literal? I don't see these names anywhere. Tell me what to change and do I really change to owen.ns.cloudflare.com? At first it did not recognize Homestead and I put "other"??
Brand User

1K Messages

 • 

30K Points

The reason you are not seeing the option to update nameservers is because your domain is pointing from I.E.C.C., a different hosting provider. Contact these folks, and they should be able to assist with updating the nameservers from our nameservers to Cloudflare's nameservers.

8 Messages

 • 

258 Points

6 years ago

Is Homestead working at all on a direct resolution for their customers that do not want to sign up for Cloudfare?
Brand User

1K Messages

 • 

30K Points

Our leadership and development are very aware of the importance of the SSL, but at the moment we still are unable to provide an answer.

6 Messages

 • 

370 Points

I wish Homestead would come up with something for this. I tried the Cloudfare thing but I didn't like the way it was going so I stopped the process. It sounds like I am handing my site over to them and even though I chose the free option they wanted payment information. Not comfortable with this process and I am considering shutting down my site after this renewal I just did is up. It is just too much and a lot I don't understand.

7 Messages

 • 

510 Points

Thanks Drew! I followed all the instructions yesterday and now have a secure site! However three pages with some outgoing links have the 'not totally secure' warning... And I did all the suggested 'Auto and all the time' things... Been waiting for Homestead to offer this a long time, so I am very happy, so far. :) https://www.kirkmcguire.com

23 Messages

 • 

872 Points

WOW - I GOT SEVEN OF MY WEBSITES NOW SECURE ... Thanks Homestead !!!! and thanks CloudFlare - you guys are AWESOME.
Brand User

11K Messages

 • 

145.1K Points

Hey bookministry
I'm so glad!!

10 Messages

 • 

316 Points

6 years ago

I have a Sitebuilder Plus website and was dreading going through this process. I just did it in about 15 minutes and my https changed over immediately! I didn't even have to wait 24 hours. Thank you, Homestead crew, this was easy.
Brand User

1K Messages

 • 

30K Points

I am very happy to hear that, and that your site was up much sooner than anticipated!

7 Messages

 • 

388 Points

6 years ago

Can anyone helpl?  I have done all with the Cloudflare and everything is great except...I can't find the 1 or more things that aren't HTTPS on my site!?  I sware I have gone over the page.  I wonder if there is a site or easy way to find out why my site isn't saying full HTTPS...it tells the viewer that portions of my site may be hazardous ;(    WestHollywoodLimousine.com now under partial https... any comment would be greatly appreciated.   Google and Firefox still say my site isn't safe.  Now, Duda isn't even directing to my mobile site!?   I thought Homestead and Duda worked together.  This certainly isn't seamless.   

After reading comments, I deleted the FB button & YouTube button.  Not much left!? ;)

15 Messages

 • 

538 Points

6 years ago

This reply was created from a merged topic originally titled Changing HTTP to HTTPS - Never received any notifications/ guidance from Homeste....

Changing our sites from HTTP to HTTPS - per Google's mandatory requirement.  How is Homestead handling this for their website Clients? I never received any email  guidance from Homestead on this important issue -- and I believe that Google's  deadline for this was July 1, 2018.

1.4K Messages

 • 

262.9K Points

Michele R.4628, you may use this procedure to provide the necessary security.

15 Messages

 • 

406 Points

6 years ago

I am reading the help.  I have gotten through Step 10, but I can't see https for my site.  I see a reference to a "flash element" but I don't know where that is to remove it.  I did remove links we had to a non-secure site.  Any other suggestions for me?  Thanks.

1.4K Messages

 • 

262.9K Points

Which domain did you setup?

15 Messages

 • 

406 Points

rosemountarts.com

1.4K Messages

 • 

262.9K Points

Did you do just the .com so far? Have you continued on to the steps, 11 to the end?

15 Messages

 • 

406 Points

I just did the .com.  I got through Step 10, But Step 11 says to look for your https site - I have been looking for https://rosemountarts.com/ and I can't find it, so I have not proceeded on.....  I did look at Cloudflare under Crypto in Step 12, but it says
"Universal SSL Status Authorizing Certificate" and so the status is not showing as active.  SO what do I do next?  Thanks for the help.

1.4K Messages

 • 

262.9K Points

Did you select the flexible SSL option? It should be working by now. Does it still show authorizing?

18 Messages

 • 

976 Points

6 years ago

I have links on my main site (hosted by homestead) to my bigcommerce store. How can I secure both sites?? I have tried the method listed here but my store links become 404 so I changed it back to the original nameservers.