Skip to main content
Brand User

647 Messages

 • 

44K Points

Mon, Feb 26, 2018 10:46 PM

Can I Secure My Homestead Website With HTTPS?

For SITEBUILDER PLUS ONLY. Do not use if you have Website Builder.

If you have a Simplestore using Sitebuilder Plus, DO NOT PROCEED WITH THIS PROCEDURE.
For more information please read this topic
:

https://community.homestead.com/homestead/topics/cloudflare-common-cloudflare-issues


Important: When we update the nameservers, it is possible to see some interruption with the website and email as the settings propagate. This is to be expected, but if it has been more than 24 hours, please contact support and we can assist.

*click on images to enlarge*

This topic addresses displaying a "secure" rating in the address bar. Currently your site shows an information icon to the left of your URL. If you click it, the message will say the site is not secure.


If you have a contact form this is important. As soon as you begin filling in a field in the form, the browser will display a more obvious message in the address bar.


To secure your site you will need to update your nameservers using Cloudflare. Below are detailed instructions on correctly configuring this so your website will be secure and your customers will feel more confident providing you their contact information.

1) Go to http://www.cloudflare.com and click on the sign up link.


2) Please enter your email address and password you wish to use for your Cloudflare account. If possible, please do not use an email address connected to your domain.
We strongly recommend you read the term and conditions. To continue you must agree to the terms and conditions by clicking on create account.


3) Enter your domain name and click on Add site

4) Select the FREE plan and click Confirm Plan.



5) Cloud flare will scan your current DNS settings and automatically populate the found DNS records. When the scan is complete, and you see all records present, click continue .




6) Compare the DNS records Cloudflare scanned to your existing DNS records. These can be found in your Homestead account, under Domains > Advanced DNS settings. They should match. If they do, click Continue.


If they don't, you can click on the name or value inside of Cloudflare that is incorrect and edit it. If you need help viewing your current DNS records, please see our topic, How can I view and edit my DNS records using Homestead nameservers.



NOTE: Please make sure to verify that the MX record has been added inside of CloudFlare's DNS settings. If you do not see a record with MX next to it, then we will need to add the MX record.


Click MX in the drop down, then click Name and type @, then Click to configure just right of that box. It will open a new window, please confirm your MX record.
If you are using email with Homestead, for server you will add mx.YOURDOMAIN.com, and for Priority you can put 10. Click save, then click Add Record.


7) Cloudflare will now provide you the new nameservers for your domain. If you do not see your nameservers, proceed to the DNS page inside of Cloudflare, and scroll down until you see Cloudflare Nameservers.

Important: When we update the nameservers, it is possible to see some interruption with the website and email as the settings propagate. This is to be expected, but if it has been more than 24 hours, please contact support and we can assist.



8) Log into your Homestead account and click the domains tab on the left. Under the domain you are working on, click Edit your nameservers. You will need to click delete next to ns3.mdnsservice.com and then change the other 2 nameservers to the ones provided by Cloudflare. You can't change and delete in the same step, so you will need to click edit twice. Click Submit


9) Return to Cloudflare and click done check nameservers.



10) The first part is now completed. Now, please review and confirm that the SSL is set to Flexible and always use HTTPS is turned on. 



11) Over the next 24 hours, try manually typing in your site with https. If it isn't set up yet, you'll get an error page. Just type https://www.yourdomain.com  and when you see your site load with HTTPS, please proceed to the next step.


NOTE: Do not proceed to the next step until you can view your website when using HTTPS (https://www.yourdomain.com) When you see your site load with HTTPS, continue to step #12.

12) Click on the SSL/TLS button at the top and select Edge Certificates. 



13) Scroll down on this page and look for the section entitled "Always use HTTPS" Turn it on. Also scroll to the bottom and find "Automatic HTTPS Rewrites" Turn it on. All other settings you can leave as default.




In a few minutes, your site will show secure.


If your site is not showing fully secure, please go republish your site.


Note: This solution is for Sitebuilder Plus sites only.

Responses

2 Messages

 • 

132 Points

2 years ago

This reply was created from a merged topic originally titled Hi, my site is showing up as 'not secure'. How do I get this resolved?.

11 Messages

 • 

242 Points

2 years ago

This reply was created from a merged topic originally titled HOW DO I GET HTTPS.

HTTPS
Brand User

634 Messages

 • 

50.3K Points

To secure your site, you'll need to follow the instructions in this article

11 Messages

 • 

242 Points

I am still using the desktop sitebuilder software
Brand User

634 Messages

 • 

50.3K Points

I see. Since you are using the desktop builder, you wouldn't be able to secure your site. I highly recommend you switch to Sitebuilder Plus at least, in order to secure your site

11 Messages

 • 

242 Points

What are the steps required to do that
Brand User

634 Messages

 • 

50.3K Points

From Sitebuilder Plus, go into your File Manager, select all files, and click Upload. Then, log into your account at homestead.com, click Websites Manager, and choose Edit with Sitebuilder Plus

2 Messages

 • 

132 Points

a year ago

This reply was created from a merged topic originally titled Secure Site.

I was needing to make our site secure in order to process transactions through PayPal. How do I go about doing that? It is very confusing.

2 Messages

 • 

210 Points

You have to open a free cloudflare account and change nameservers to point to your site.

2 Messages

 • 

132 Points

a year ago

This reply was created from a merged topic originally titled certificate for website.

how do i get a trust certificate?
Brand User

634 Messages

 • 

50.3K Points

Hello,

Please follow these instructions to secure your sitebuilder plus site.

2 Messages

 • 

120 Points

a year ago

I'm testing this procedure on an older less used site: GarWoodPegasus.homestead.com 
When I go to add the site I get the error : "Pleaser be sure you are using the root domain..." What am I doing wrong? Is Homestead the root domain?
Brand User

634 Messages

 • 

50.3K Points

Hello,

That is a site name, not a domain. Unfortunately, this process can only be completed with a domain name.

2 Messages

 • 

120 Points

Well, I completed the procedure on my medical office domain, AAFPC.net, which worked perfectly with https for 2 1/2 days then the domain went dead. Back and forth between Cloudflare and Namecheap about DNS, which never got resolved so I had to attempt to revert back to my original non-secure site. I did so after sever hours of changing settings, mainly DNS and forwarding on Namecheap BUT my email form page http://aafpc.homestead.com/Rx_Email.html_attempts to send a https request so the email doesn't go through. The corresponding email account, Rx@AAFPC.net, is working properly outside of Homestead. To test, the form the required fields will need any character in them. Once, I get the site back functional and stabilized I will still need to get it secure. We are in desperate need of assistance here as patient care is compromised.

Thank you for your help.

RMS, MD
A portion of our whois, the domain name servers appear correct, right?:
ech Name: WhoisGuard Protected
Tech Organization: WhoisGuard, Inc.
Tech Street: P.O. Box 0823-03411 
Tech City: Panama
Tech State/Province: Panama
Tech Postal Code: 
Tech Country: PA
Tech Phone: +507.8365503
Tech Phone Ext: 
Tech Fax: +51.17057182
Tech Fax Ext: 
Tech Email: 8bba54022a99468086c879d43e53d9c5.protect@whoisguard.com
Name Server: dns1.registrar-servers.com  
Name Server: dns2.registrar-servers.com
Brand User

634 Messages

 • 

50.3K Points

Those are not our nameservers, so I could not say if they are correct or not. If you were to call in and have one of our web advisors walk through these instructions with you, we could make sure it is set up properly.

1-800-710-1998

In regard to that domain, this is currently not working at all. I cannot see that this domain is pointing to Homestead in any way. You would need to at least be pointing to our IP address from your domain registrar.

1. A Record:   @       Points to:    108.167.135.108

2. CNAME:      *       Points to:    websites015.homestead.com

3. CNAME:     www      Points to:    websites015.homestead.com

2 Messages

 • 

130 Points

a year ago

So I went through all of the steps to secure my site. When loaded from my laptop... it now has the https but still has the i with a circle around it and says the site is not fully secured. Any ideas..? 
Brand User

634 Messages

 • 

50.3K Points

This means there is an element on your page that is not secure. This is typically HTML that causes this, but it could also be a visitor counter on your site.
If you edit any HTML to include https in the links or remove any visitor counters and republish, your site would show fully secure.

13 Messages

 • 

494 Points

7 months ago

I just finished this up this morning. My website ON COMPUTER works great. However, I can't see my site ON MOBILE now. The error says the browser cannot connect to the server.

Any ideas for me?
Brand User

2.2K Messages

 • 

54.3K Points

Hello,

I am able to view both websites on a mobile device. That sounds like it may have been a connection error. What website are you getting this message with?

13 Messages

 • 

494 Points

13 Messages

 • 

494 Points

And I actually clicked the website I just messaged you and got this. And after a few seconds it went to my page.


13 Messages

 • 

494 Points

I'm using Safari on mobile
Brand User

2.2K Messages

 • 

54.3K Points

Thank you. That is definitely a connection error. When I go to that site is comes right up on desktop and mobile. You can also try it in another browser.