Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you...
Transcript of Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you...
![Page 1: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/1.jpg)
Moving Toward SSL:What it is, How to do it, & Why you
shouldcare
Mukalele Rogers, #WordCampKampalaSaturday, 16 December 2017
![Page 2: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/2.jpg)
Hello!A bit about me…
@mrogers4christ
www.mukalele.net
![Page 3: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/3.jpg)
What I Docenter4webpresence.comOffering domain name registration and Web Hosting For Less!+Free SSL
![Page 4: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/4.jpg)
What I DoAs an ICT Teacher / Trainer, I maintain an online shop powered by + at mukalele.net
![Page 5: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/5.jpg)
What I DoSharebility Uganda -An educational digital resource sharing system for Ugandan Schools
sharebility.mukalele.net
![Page 6: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/6.jpg)
![Page 7: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/7.jpg)
1.SSL: What it is
![Page 8: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/8.jpg)
HTTP Review
![Page 9: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/9.jpg)
HTTPS
![Page 10: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/10.jpg)
HTTP vs HTTPS
![Page 11: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/11.jpg)
Image: https://thenocman.com/ssl-certificates/
![Page 12: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/12.jpg)
2.Why you should care
![Page 13: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/13.jpg)
Who Needs It?
◎E-Commerce◎Social Media◎Form Data e.g wp-login form◎Mandatory for many functionalities See goo.gl/LoY7u5
e.g. Geolocation, Device motion, EME, getUserMedia, AppCache, Notifications
◎SEO for websites◎Everyone!
![Page 14: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/14.jpg)
![Page 15: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/15.jpg)
![Page 16: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/16.jpg)
3.How to doit
![Page 17: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/17.jpg)
You’ll Need…
![Page 18: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/18.jpg)
Certificate contents
◎Domain name (commonname)◎Public key◎Owner of certificate (subject)◎Issuer of certificate (CA)◎Expiration data◎Serial number
![Page 19: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/19.jpg)
Types of Certificates
◎Domain Validation – CA checks right of applicant to use domain name
◎Organization Validation – CA does above + vets organization
◎Extended Validation – CA does above + thorough vetting oforganization
![Page 20: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/20.jpg)
Basic Steps for Adding SSL
1. Generate a CSR(certificate signing request) at your web host
2. Buy a certificate from a vendor
3. Validate your domain/certificate
4. Send the CSR, certificate, and bundle files to your web host
5. Configure your site touse SSL
6. Upon renewal, repeat steps #1-41
![Page 21: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/21.jpg)
![Page 22: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/22.jpg)
![Page 23: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/23.jpg)
◎Free, automated, open Certificate Authority◎Domain validation◎3-month expiry
letsencrypt.org
![Page 24: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/24.jpg)
Full List goo.gl/1BsdZF
Lets Encrypt Support
![Page 25: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/25.jpg)
Details: goo.gl/uHF8rS
All the issued certificates are Cross-signed by IdenTrust. In this way, all the L.E. certificates are trusted by major browsers.
Lets Encrypt plugin for cPanel
![Page 26: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/26.jpg)
Details: sslforfree.com
Wildcard Certificates Supported? They are not supported but you can add up to 100 domains and or subdomains per certificate.
Tool for Generating Certificates in Minutes
![Page 27: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/27.jpg)
cPanel SSL/TLS Manager
![Page 28: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/28.jpg)
•Lets Encrypt certificates have a 90 days validity. After the expiry, the certificates are not valid anymore and the browsers will raise security errors.•You will receive remind emails whenever a certificate is near to expire. Certificate renewal can be automated with a cron task.
We can avoid browser errors such as:
Validity
![Page 29: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/29.jpg)
◎Update Site URL from http:// to https://◎Force http requests tohttps
WordPress SSL / HTTPS Tools
![Page 30: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/30.jpg)
Here's a simple tool that will tell you about any insecure items on your SSL page!
Why No Padlock?
whynopadlock.com
![Page 31: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/31.jpg)
Removing SSL
◎wp-config.php◎.htaccess◎Updating site URL (functions.php)
![Page 32: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/32.jpg)
![Page 33: Moving Toward SSL - Mukalele Rogers€¦ · Moving Toward SSL: What it is,How to doit, & Why you shouldcare Mukalele Rogers, #WordCampKampala ... •Lets Encrypt certificates have](https://reader033.fdocuments.in/reader033/viewer/2022053006/5f09af737e708231d4280622/html5/thumbnails/33.jpg)
Thanks!
Demo Time and questions.