Jump to content

Community

SSL certificate to the IP.Chat server


motomac
 Share

Recommended Posts

My website is running on HTTPS, and some of my users can't enter the chat because their browsers block insecure content from IPS Chat server (via HTTP). There are only two ways to launch chat on HTTPS:

  1. Teach all users every time when they want to enter the chat manually allow loading insecure content lz3LF.thumb.png.90552eab6f535e359e8c167f
  2. Change chat code to work via HTTPS.

The first variant is impossible for me, so I tried to make second. I had manually edited chat JS-script adding https:// instead of http://. Most of the errors in console disappeared. But I still get one error:

Failed to load resource: net::ERR_INSECURE_RESPONSE

As I see, it's because chat server has self-signed SSL certificate https://server05.ips-chat-service.com/

ips-chat-service.com_cert.thumb.png.ca47

Is it possible to add correct certificate on your chat servers?

Link to comment
Share on other sites

SSL for chat is not supported at this time, it will be with IPS4 however. 

 

To work around this issue now with a full site as SSL (HTTPS) you can remove the chat link in the nav bar, then add a new link for chat in a pop up using http. 

Link to comment
Share on other sites

SSL for chat is not supported at this time, it will be with IPS4 however. 

​I fail to see how this is a client problem that can be solved with a forum upgrade? Surely this is just applying a SSL certificate to the server, there's a whole bunch of wildcard certs you can pick up and install for cheap.

 

Link to comment
Share on other sites

​I fail to see how this is a client problem that can be solved with a forum upgrade? Surely this is just applying a SSL certificate to the server, there's a whole bunch of wildcard certs you can pick up and install for cheap.

 

It's not as simple as installing a cert, if that was all that was needed it would have been done years ago.

As mentioned, ips4 chat will support ssl though. 

 

Thank you

Link to comment
Share on other sites

  • 2 weeks later...

Looking forward to see IPS4 Chat with SSL. :)

We also modified our url structure in PublicOutput.php to make the chat work via http:// and many other pages via https://

Please notice if you make your forum work via a secure connection (https://) that visitors in most cases will get mixed content warnings in their browser because many external elements such as added images by the members are hosted at third parties who don't support SSL.

Link to comment
Share on other sites

  • 2 months later...

Yes, but you can manually make changes in public/js/ips.chat.js

Find:

iframe.writeAttribute( 'src', 'http://' + serverHost + serverPath + 'web/postMessage.php?parent=' + ourUrl );

Replace with

iframe.writeAttribute( 'src', 'https://' + serverHost + serverPath + 'web/postMessage.php?parent=' + ourUrl );

Find

iframe.writeAttribute( 'src', 'http://' + serverHost + serverPath + 'web/iframeProxy.php?parent=' + ourUrl );

Replace with

iframe.writeAttribute( 'src', 'https://' + serverHost + serverPath + 'web/iframeProxy.php?parent=' + ourUrl );

Find

elem.postMessage( message, 'http://' + serverHost );

Replace with

elem.postMessage( message, 'https://' + serverHost );

Find

elem.location = 'http://' + serverHost + serverPath + '/web/iframeProxy.php?parent=' + ourUrl + '#' + message + '&timestamp=' + Math.round(new Date().getTime() / 1000);

Replace with

elem.location = 'https://' + serverHost + serverPath + '/web/iframeProxy.php?parent=' + ourUrl + '#' + message + '&timestamp=' + Math.round(new Date().getTime() / 1000);

As I remember, it was enough.

Edited by motomac
Link to comment
Share on other sites

  • Management

I tried this yesterday. It gave unsecure content error's in Chrome, so I think more changes on the IPS side are needed.

​If you're using IPS4, can you submit a ticket on this please so we can review? Thank you.

Link to comment
Share on other sites

Nope. Sorry. still running a heavy modified 3.3.x.

We will start do test upgrades to 4.x soon. But it will probably take multiple months before we actually have everything working in production on IPS4

Edited by Joriz
Link to comment
Share on other sites

 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

We use technologies, such as cookies, to customise content and advertising, to provide social media features and to analyse traffic to the site. We also share information about your use of our site with our trusted social media, advertising and analytics partners. See more about cookies and our Privacy Policy