osmbe / website

The OpenStreetMap Belgium website
https://openstreetmap.be
Other
3 stars 17 forks source link

Switch to HTTPS #47

Closed jbelien closed 6 years ago

jbelien commented 6 years ago

More and more website are switching to HTTPS (mostly thanks to Let's Encrypt) and I think it's time for us too :)

But it means that we can't use osm.be hosted by GitHub Pages anymore ; unfortunately GitHub Pages does not allow (yet ?) to have our own domain name (osm.be) and HTTPS.

I see (at the moment) 2 solutions :

I would recommend the second solution ; not very "professional" to have an official website which url is https://***.github.io/*** 😁 But it would mean that (in a first step) every update has to be manually done on the server hosting https://osm.be/ ; I know it's possible to make to update automatic with tools like Travis or Chef or ... but I have never done it myself and must admit it looks at bit "opaque" at the moment (maybe someone can help me with that 😊 )

prmtl commented 6 years ago

Hi! I'm just passing by, so sorry if I do not know all the details.

I just want to show you all another option. This page can still be hosted on GitHub Pages and have SSL enabled. It is possible if domain will be "delegated" to CloudFlare. In short words, CloudFlare is offering free SSL similar to LetsEncrypt. Here is a guide: https://blog.cloudflare.com/secure-and-fast-github-pages-with-cloudflare/

I have an example page that is set up using CloudFlare SSL and GitHub Pages: https://gh-with-ssl.prmtl.net/ https://github.com/prmtl/gh-with-ssl

jbelien commented 6 years ago

Hello @prmtl ,

Thanks a lot for your suggestion. This issue will soon be closed thanks to what GitHub announced yesterday : https://blog.github.com/2018-05-01-github-pages-custom-domains-https/ 🎉

No need to use Cloudflare or self hosting anymore !

jbelien commented 6 years ago

@xivk :

Can you update the IP address(es) behind osm.be domain name according to https://help.github.com/articles/setting-up-an-apex-domain/#configuring-a-records-with-your-dns-provider so I can enable HTTPS on osm.be ?

Thanks :)

EDIT : My mistake, it's probably configured correctly. GitHub message is :

Not yet available for your site because the certificate has not finished being issued

prmtl commented 6 years ago

Great! 🎉 Good to know :D

jbelien commented 6 years ago

Still not possible to enable HTTPS and I don't really get why ...

Not yet available for your site because the certificate has not finished being issued. Please allow 24 hours for this process to complete. (www.osm.be)

jbelien commented 6 years ago

I (finally) could enabled the HTTPS here on GitHub pages 🎉