{"id":482,"date":"2018-11-19T18:40:16","date_gmt":"2018-11-20T00:40:16","guid":{"rendered":"http:\/\/zewwy.ca\/?p=482"},"modified":"2018-11-19T18:40:56","modified_gmt":"2018-11-20T00:40:56","slug":"secure-a-wordpress-site-with-https","status":"publish","type":"post","link":"https:\/\/zewwy.ca\/index.php\/2018\/11\/19\/secure-a-wordpress-site-with-https\/","title":{"rendered":"Secure a WordPress Site with HTTPS"},"content":{"rendered":"

<\/span>Intro<\/strong><\/span><\/h1>\n

Well it is slowly becoming a requirement, even for a site that simply shares content and has no portal or user information… such as my site… but may as well do it now since we can get certified certificates for free!!! Wooohoooo!<\/p>\n

So doing a bit of research….<\/p>\n

<\/span>Research<\/span><\/h1>\n

Securing WordPress<\/a><\/p>\n

TurnKey SSL Certs<\/a><\/p>\n

Let’s Encrypt!<\/a><\/p>\n

Cert-Bot<\/a><\/p>\n

TurnKey WordPress uses Debian… what version?<\/a><\/p>\n

<\/span>The Tasks<\/span><\/h1>\n

Alright so we are running Debian 8, let’s follow that cert-bot tut….<\/p>\n

Let’s start by creating a snapshot, at this point I don’t exactly have backups running yet… I know I know… I was suppose to do Free Hypervisor Backup Part 3 where I redesign ghettoVCB’s script…. unfortunately I can only do so much and I have many projects on the run. I will get it to though, I promise!<\/p>\n

\"\"<\/a>
\nNow with that out of the way, running Cert-Bot…
\nThen I ran into some errors… oopsies….<\/p>\n

\"\"<\/a>
\nWhat happened?!?!
\nWell I was working through a lot of network redesign, and my public website, the very WordPress I was trying to get a certificate for,
\nhad a NAT rule to get out to the internet, which is why the grabbing and running of the CertBot succeeded up until this point.
\nI didn’t create the NAT rule to allow HTTP traffic just yet as I was wanting to create this certificate first. Little did I know it was going to be a prerequisite
\nAnyway I had to update my Websites DNS record to point to my new public IP,
\nas well as create a NAT and security rule to allow my website to be accessible from the outside world…<\/p>\n

\"\"<\/a>
\nI had to wait a while for DNS to replicate to other servers outside, specifically whichever ones Lets Encrypt servers use to locate and validate my requests from CertBot.
\nso…
\nafter making the changes, and waiting a while I attempted to access my website from the internet again,
\nit was failing and then I realized my mistake was in the security rule I defined. correcting my security rule, I could access my website.
\nrunning Certbot again…<\/p>\n

\"\"<\/a><\/p>\n

Yay, and it listed all the virtual hosts hosted by my turnkey wordpress..<\/p>\n

then created another NAT rule to hanndle https traffic… and then the security rule…<\/p>\n

That was literally it! CertBot made it so easy! Yay that’s a first! \ud83d\ude00<\/p>\n","protected":false},"excerpt":{"rendered":"

Intro Well it is slowly becoming a requirement, even for a site that simply shares content and has no portal or user information… such as my site… but may as well do it now since we can get certified certificates for free!!! Wooohoooo! So doing a bit of research…. Research Securing WordPress TurnKey SSL Certs … <\/p>\n

Continue reading “Secure a WordPress Site with HTTPS”<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"sfsi_plus_gutenberg_text_before_share":"","sfsi_plus_gutenberg_show_text_before_share":"","sfsi_plus_gutenberg_icon_type":"","sfsi_plus_gutenberg_icon_alignemt":"","sfsi_plus_gutenburg_max_per_row":"","footnotes":""},"categories":[8],"tags":[121,133,56],"class_list":["post-482","post","type-post","status-publish","format-standard","hentry","category-server-administration","tag-https","tag-secure","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/482","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/comments?post=482"}],"version-history":[{"count":1,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/482\/revisions"}],"predecessor-version":[{"id":483,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/482\/revisions\/483"}],"wp:attachment":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/media?parent=482"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/categories?post=482"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/tags?post=482"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}