Using Wordpress with HTTPS on the Kinamo hosting platform

Last updated on 28 Sep 2023, 10:18:04.
Category: All about web hosting | Webhosting settings

PHP SSL Wordpress

This article explains on how you may use an SSL certificate on the Kinamo hosting platform. The Kinamo hosting platform uses HAProxy load balancers and SSL offloading. This means that for detecting your secure website, you will have to make some changes to the Wordpress installation so it correctly detects the secured traffic.

Capturing the HTTPS header and the correct client IP addresses

To avoid Wordpress giving errors on each element not correctly sent through HTTPS you will have to tell it that you are using SSL.An additional step is by capturing the right client IP. If you do not make this change, all visitor IP's for posts and comments will appear to be coming from the same IP, namely the Kinamo load balancer IP.This van be done, by simply adding the following code to the wp-config.php:

// ** Kinamo SSL ** //
if (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https'){
 $_SERVER['HTTPS']='on';
 $_SERVER['REMOTE_ADDR'] = $_SERVER["HTTP_X_FORWARDED_FOR"];
}

define('FORCE_SSL_ADMIN', true);


Capturing URL rewrites

As a final precaution you must alter the .htaccess file of your Wordpress site, by adding the following rules. If you fail to do so, chances are the URL of your site will not be correctly determined and you will end up with an infinite redirect loop:

<IfModule mod_rewrite.c>

RewriteEngine On
RewriteCond % !https
RewriteCond % off
RewriteRule ^ https://%% [L,R=301]

</IfModule>

Correcting HTTP content

To conclude you can replace hardcoded HTTP pointers with the correct HTTPS URL. Wordpress typically saves content as images with hardcoded absolute URL's in the database. A simple and effective way is by using a plugin called the Wordpress SSL Insecure Content Fixer plugin. This plugin will replace the URL's with their correct HTTPS variant.
As an alternative you can always dive into the database and do the replacement of the URL's there.


Related articles

Apache - Disable SSL 2.0, SSL 3.0 and opt fore a modern safe SSL config

This article shows you how to disable the SSL 2.0, SSL 3.0 and older TLS version protocols on your Apache...

Read more

Kinamo mail server settings (mail server cheat sheet)

The following article provides the basic settings and server names (domain names) for the Kinamo mail infrastructure. These settings allow...

Read more

Create an automatic SPAM filter in the Kinamo Webmail

This article explains how you may create a filter that will automatically place SPAM messages in a special folder, so...

Read more

Need extra help?

Were not all your questions answered?
Don't worry, we will be happy to help you via a support request!

Select your language

All languages: