• Home
  • Archive
  • Tools
  • Contact Us

The Customize Windows

Technology Journal

  • Cloud Computing
  • Computer
  • Digital Photography
  • Windows 7
  • Archive
  • Cloud Computing
  • Virtualization
  • Computer and Internet
  • Digital Photography
  • Android
  • Sysadmin
  • Electronics
  • Big Data
  • Virtualization
  • Downloads
  • Web Development
  • Apple
  • Android
Advertisement
You are here: Home » WordPress SSL Lock Not Showing : Master Checklist

By Abhishek Ghosh August 16, 2014 5:01 pm Updated on October 17, 2014

WordPress SSL Lock Not Showing : Master Checklist

Advertisement

Here is a Full Guide on How To Troubleshoot When WordPress is Not Showing SSL Padlock on Browser. Making WordPress SSL Lock to appear has tricks. Clearly know – any PHP caching, backend gzip can never create any issue with SSL Padlock’s appearance or disappearance. We shared some tricks in the guide WordPress SSL Setup Tips, but here is almost the full guide which work and there is no guide on the whole internet which has all these information at one place. It is unlikely that WordPress Support forum “volunteers” can ever help you. Their main target (not of all, but the most) is to drive indirectly towards the paid individual service advertised at WordPress Jobs. Furthermore, if it is high end setup on Rackspace with Nginx, they will fail to do anything good.

 

WordPress SSL Lock Not Showing : Our Setup

 

While we can not fully disclose our setup, but we can partially disclose an idea about our setup needed for this guide :

 

  1. This is a Multi Server Scalable Setup
  2. There is loadbalancer in front
  3. We use Rackspace Cloud DNS, Cloud Files – almost everything from Rackspace
  4. Our loadbalancer do not listen to port 443 – it is closed. It is loadbalancer which holds the SSL certificates
  5. We use Nginx PHP5-FPM as backend.
  6. We use Nginx’s GZIP feature
  7. We use Google Ads

With all these, we pass all the browsers – WordPress  shows the desired SSL padlock on almost all the major browsers. This guide, WordPress SSL Lock Not Showing is to help clueless peoples fighting with problems. Using loadbalancer in front has the basic advantages including we need not to think about updating for securing against the latest vulnerabilities. However, loadbalancer in front is not recommend to use for pages which requires higher security like for transaction. You must use a Bare Metal (onMetal by Rackspace) or Colocation Server or Dedicated server instead of Cloud Server instance. The website which will require higher security includes financial websites. For $5 transaction via PayPal, you need not to bother.

Advertisement

---

WordPress SSL Lock Not Showing

 

WordPress SSL Lock Not Showing : Needed stuffs for Server Side (Nginx)

 

As we have loadbalancers in front, we need no SSL cert to be added on the servers. Our port 443 are closed, in fact which port we use is difficult to guess. It is not possible to directly access any of our main servers. loadbalancers has cache enabled and support for cookies. This is conflicting with the concept of security but practically it is not dangerous as the setup is equivalent to reverse proxying.

As we are using loadbalancer, in the virtual host file, we have this snippet inside location / block ( the file is /etc/nginx/sites-available/default ) :

Vim
1
2
3
if ($http_x_forwarded_proto = "http") {
rewrite  ^/(.*)$  https://thecustomizewindows.com/$1 permanent;
}

This is only to redirect HTTP to HTTPS, so that we get a nice 301 redirection from corresponding HTTP url. You can do whatever optimization you want on server – it will not do anything for the disappearance of SSL Padlock on browser. Essentially, we need to serve the HTML files.

 

WordPress SSL Lock Not Showing : Basics Which Disturbs

 

As everyone knows, we should server only contents from HTTPS URLs – it is important for CDN. Rackspace Cloud Files does the work nicely. We need not to use a sub-domain of the website – it will require additional SSL certificate (or a wild card certificate) plus will increase the round trip delay time.

We have ONLY WP-HTML-Compression plugin for converting to SSL urls on the frontend :

Vim
1
http://wordpress.org/plugins/wp-html-compression/

If you follow our method, you will need no other Plugin for HTTPS urls. These are the Plugins we use :

 

  1. Ad Injection
  2. Allow REL= and HTML in Author Bios
  3. Attachment Pages Redirect
  4. Break Out Of Frames
  5. Dagon Design Sitemap Generator
  6. Dublin Core for WordPress
  7. Easy Contact
  8. Header and Footer
  9. Hello Dolly
  10. Humans.txt
  11. Post-Plugin Library
  12. Redirection
  13. Smart 404
  14. Socialize
  15. WordPress SEO
  16. WP-HTML-Compression
  17. WP-Optimize
  18. WP Post to PDF
  19. Yet Another Related Posts Plugin

(needed only for Genesis Framework)

  1. Genesis Beta Tester
  2. Genesis eNews Extended
  3. Genesis Printstyle Plus
  4. Genesis Simple Edits
  5. Genesis Simple Hooks

We have modifications to some extent, but mostly they will not harm – they will not make your SSL Padlock to disappear. What disturbs is the =ver? in the CSS and Javascript files, which we can make to disappear by adding this snippet to active Theme’s (or Child Theme’s if is in use) functions.php file :

Vim
1
2
3
4
5
6
7
8
// removes the fu**king ?ver= stuff from js and css files
function remove_cssjs_ver( $src ) {
    if( strpos( $src, '?ver=' ) )
        $src = remove_query_arg( 'ver', $src );
    return $src;
}
add_filter( 'style_loader_src', 'remove_cssjs_ver', 1000 );
add_filter( 'script_loader_src', 'remove_cssjs_ver', 1000 );

1000 is set priority. If you have =ver? in the CSS and Javascript files in output, you’ll get caught by few browsers.

Next is wp-config.php file. You need to add these :

Vim
1
2
3
4
5
6
7
8
9
/** Fixes SSL issues */
if (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https')
    $_SERVER['HTTPS'] = 'on';
define('FORCE_SSL_ADMIN', true);
define('FORCE_SSL_LOGIN', true);
/** Stop stop stop */
/** stop copying! */
/** Add the first 5 lines before this line, you cam omit the first - Fixes SSL issues  */
require_once(ABSPATH . 'wp-settings.php');

This is maximum you will need to do.

 

WordPress SSL Lock Not Showing : Testing

 

Test with Opera (we use Mac) browser. If Opera pass your website with golden yellow or green padlock, it is unlikely that any other browser will make WordPress not to show the SSL Padlock. Opera per se is difficult to troubleshoot when WordPress SSL lock not showing. Safari and IE can show but others might not show. This tool works for detecting directly written insecure files :

Vim
1
http://www.whynopadlock.com/

But, it will fail to detect many smaller things like errors due to certain web font loading, insecure content loading from the CSS or JS as call etc. Easiest tool is Google Chrome’s Developer’s tools.

This Article Has Been Shared 769 Times!

Facebook Twitter Pinterest

Abhishek Ghosh

About Abhishek Ghosh

Abhishek Ghosh is a Businessman, Surgeon, Author and Blogger. You can keep touch with him on Twitter - @AbhishekCTRL.

Here’s what we’ve got for you which might like :

Articles Related to WordPress SSL Lock Not Showing : Master Checklist

  • HTTPS : Secure Hypertext Transfer Protocol

    HTTPS is an application protocol based on HTTP, for the secure transfer of data from Hyper Text, it is the secure version of HTTP.

  • Cloud Computing in the Past Year : Who Uses and Who Do Not

    Cloud Computing, has involved vendors such as Dell, EMC, HP and IBM and now facing a market that challenges them to innovate more towards cloud services.

  • Difference Between www and Non www URL

    Difference Between www and Non www URL will automatically make you to understand the fact, for a new domain today, there is no reason to use www URL anymore.

  • Databases in the Cloud : An Abstract

    Databases in the Cloud is an article where the concept as well as the various types and characteristics of cloud database provides a basic understanding.

  • Facebook Notes API : Make To Read More

    Facebook Notes API Has Some Interesting Points. Some of the features has been removed in new version of API but still some works in legacy mode.

Additionally, performing a search on this website can help you. Also, we have YouTube Videos.

Take The Conversation Further ...

We'd love to know your thoughts on this article.
Meet the Author over on Twitter to join the conversation right now!

If you want to Advertise on our Article or want a Sponsored Article, you are invited to Contact us.

Contact Us

Subscribe To Our Free Newsletter

Get new posts by email:

Please Confirm the Subscription When Approval Email Will Arrive in Your Email Inbox as Second Step.

Search this website…

 

Popular Articles

Our Homepage is best place to find popular articles!

Here Are Some Good to Read Articles :

  • Cloud Computing Service Models
  • What is Cloud Computing?
  • Cloud Computing and Social Networks in Mobile Space
  • ARM Processor Architecture
  • What Camera Mode to Choose
  • Indispensable MySQL queries for custom fields in WordPress
  • Windows 7 Speech Recognition Scripting Related Tutorials

Social Networks

  • Pinterest (24.3K Followers)
  • Twitter (5.8k Followers)
  • Facebook (5.7k Followers)
  • LinkedIn (3.7k Followers)
  • YouTube (1.3k Followers)
  • GitHub (Repository)
  • GitHub (Gists)
Looking to publish sponsored article on our website?

Contact us

Recent Posts

  • The Importance of Voice and Style in Essay Writing April 1, 2023
  • What Online Casinos Have No Deposit Bonus in Australia March 30, 2023
  • Four Foolproof Tips To Never Run Out Of Blog Ideas For Your Website March 28, 2023
  • The Interactive Entertainment Serving as a Tech Proving Ground March 28, 2023
  • Is it Good to Run Apache Web server and MySQL Database on Separate Cloud Servers? March 27, 2023

About This Article

Cite this article as: Abhishek Ghosh, "WordPress SSL Lock Not Showing : Master Checklist," in The Customize Windows, August 16, 2014, April 1, 2023, https://thecustomizewindows.com/2014/08/wordpress-ssl-lock-showing-master-checklist/.

Source:The Customize Windows, JiMA.in

PC users can consult Corrine Chorney for Security.

Want to know more about us? Read Notability and Mentions & Our Setup.

Copyright © 2023 - The Customize Windows | dESIGNed by The Customize Windows

Copyright  · Privacy Policy  · Advertising Policy  · Terms of Service  · Refund Policy

We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies.
Do not sell my personal information.
Cookie SettingsAccept
Manage consent

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
CookieDurationDescription
cookielawinfo-checkbox-analytics11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional11 monthsThe cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy11 monthsThe cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
Functional
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytics
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Advertisement
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Others
Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet.
SAVE & ACCEPT