• Home
  • Archive
  • Tools
  • Contact Us

The Customize Windows

Technology Journal

  • Cloud Computing
  • Computer
  • Digital Photography
  • Windows 7
  • Archive
  • Cloud Computing
  • Virtualization
  • Computer and Internet
  • Digital Photography
  • Android
  • Sysadmin
  • Electronics
  • Big Data
  • Virtualization
  • Downloads
  • Web Development
  • Apple
  • Android
Advertisement
You are here: Home » WordPress SSL Lock Not Showing : Master Checklist

By Abhishek Ghosh August 16, 2014 5:01 pm Updated on October 17, 2014

WordPress SSL Lock Not Showing : Master Checklist

Advertisement

Here is a Full Guide on How To Troubleshoot When WordPress is Not Showing SSL Padlock on Browser. Making WordPress SSL Lock to appear has tricks. Clearly know – any PHP caching, backend gzip can never create any issue with SSL Padlock’s appearance or disappearance. We shared some tricks in the guide WordPress SSL Setup Tips, but here is almost the full guide which work and there is no guide on the whole internet which has all these information at one place. It is unlikely that WordPress Support forum “volunteers” can ever help you. Their main target (not of all, but the most) is to drive indirectly towards the paid individual service advertised at WordPress Jobs. Furthermore, if it is high end setup on Rackspace with Nginx, they will fail to do anything good.

 

WordPress SSL Lock Not Showing : Our Setup

 

While we can not fully disclose our setup, but we can partially disclose an idea about our setup needed for this guide :

 

  1. This is a Multi Server Scalable Setup
  2. There is loadbalancer in front
  3. We use Rackspace Cloud DNS, Cloud Files – almost everything from Rackspace
  4. Our loadbalancer do not listen to port 443 – it is closed. It is loadbalancer which holds the SSL certificates
  5. We use Nginx PHP5-FPM as backend.
  6. We use Nginx’s GZIP feature
  7. We use Google Ads

With all these, we pass all the browsers – WordPress  shows the desired SSL padlock on almost all the major browsers. This guide, WordPress SSL Lock Not Showing is to help clueless peoples fighting with problems. Using loadbalancer in front has the basic advantages including we need not to think about updating for securing against the latest vulnerabilities. However, loadbalancer in front is not recommend to use for pages which requires higher security like for transaction. You must use a Bare Metal (onMetal by Rackspace) or Colocation Server or Dedicated server instead of Cloud Server instance. The website which will require higher security includes financial websites. For $5 transaction via PayPal, you need not to bother.

Advertisement

---

WordPress SSL Lock Not Showing

 

WordPress SSL Lock Not Showing : Needed stuffs for Server Side (Nginx)

 

As we have loadbalancers in front, we need no SSL cert to be added on the servers. Our port 443 are closed, in fact which port we use is difficult to guess. It is not possible to directly access any of our main servers. loadbalancers has cache enabled and support for cookies. This is conflicting with the concept of security but practically it is not dangerous as the setup is equivalent to reverse proxying.

As we are using loadbalancer, in the virtual host file, we have this snippet inside location / block ( the file is /etc/nginx/sites-available/default ) :

Vim
1
2
3
if ($http_x_forwarded_proto = "http") {
rewrite  ^/(.*)$  https://thecustomizewindows.com/$1 permanent;
}

This is only to redirect HTTP to HTTPS, so that we get a nice 301 redirection from corresponding HTTP url. You can do whatever optimization you want on server – it will not do anything for the disappearance of SSL Padlock on browser. Essentially, we need to serve the HTML files.

 

WordPress SSL Lock Not Showing : Basics Which Disturbs

 

As everyone knows, we should server only contents from HTTPS URLs – it is important for CDN. Rackspace Cloud Files does the work nicely. We need not to use a sub-domain of the website – it will require additional SSL certificate (or a wild card certificate) plus will increase the round trip delay time.

We have ONLY WP-HTML-Compression plugin for converting to SSL urls on the frontend :

Vim
1
http://wordpress.org/plugins/wp-html-compression/

If you follow our method, you will need no other Plugin for HTTPS urls. These are the Plugins we use :

 

  1. Ad Injection
  2. Allow REL= and HTML in Author Bios
  3. Attachment Pages Redirect
  4. Break Out Of Frames
  5. Dagon Design Sitemap Generator
  6. Dublin Core for WordPress
  7. Easy Contact
  8. Header and Footer
  9. Hello Dolly
  10. Humans.txt
  11. Post-Plugin Library
  12. Redirection
  13. Smart 404
  14. Socialize
  15. WordPress SEO
  16. WP-HTML-Compression
  17. WP-Optimize
  18. WP Post to PDF
  19. Yet Another Related Posts Plugin

(needed only for Genesis Framework)

  1. Genesis Beta Tester
  2. Genesis eNews Extended
  3. Genesis Printstyle Plus
  4. Genesis Simple Edits
  5. Genesis Simple Hooks

We have modifications to some extent, but mostly they will not harm – they will not make your SSL Padlock to disappear. What disturbs is the =ver? in the CSS and Javascript files, which we can make to disappear by adding this snippet to active Theme’s (or Child Theme’s if is in use) functions.php file :

Vim
1
2
3
4
5
6
7
8
// removes the fu**king ?ver= stuff from js and css files
function remove_cssjs_ver( $src ) {
    if( strpos( $src, '?ver=' ) )
        $src = remove_query_arg( 'ver', $src );
    return $src;
}
add_filter( 'style_loader_src', 'remove_cssjs_ver', 1000 );
add_filter( 'script_loader_src', 'remove_cssjs_ver', 1000 );

1000 is set priority. If you have =ver? in the CSS and Javascript files in output, you’ll get caught by few browsers.

Next is wp-config.php file. You need to add these :

Vim
1
2
3
4
5
6
7
8
9
/** Fixes SSL issues */
if (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https')
    $_SERVER['HTTPS'] = 'on';
define('FORCE_SSL_ADMIN', true);
define('FORCE_SSL_LOGIN', true);
/** Stop stop stop */
/** stop copying! */
/** Add the first 5 lines before this line, you cam omit the first - Fixes SSL issues  */
require_once(ABSPATH . 'wp-settings.php');

This is maximum you will need to do.

 

WordPress SSL Lock Not Showing : Testing

 

Test with Opera (we use Mac) browser. If Opera pass your website with golden yellow or green padlock, it is unlikely that any other browser will make WordPress not to show the SSL Padlock. Opera per se is difficult to troubleshoot when WordPress SSL lock not showing. Safari and IE can show but others might not show. This tool works for detecting directly written insecure files :

Vim
1
http://www.whynopadlock.com/

But, it will fail to detect many smaller things like errors due to certain web font loading, insecure content loading from the CSS or JS as call etc. Easiest tool is Google Chrome’s Developer’s tools.

This Article Has Been Shared 677 Times!

Facebook Twitter Pinterest
Abhishek Ghosh

About Abhishek Ghosh

Abhishek Ghosh is a Businessman, Surgeon, Author and Blogger. You can keep touch with him on Twitter - @AbhishekCTRL.

Here’s what we’ve got for you which might like :

Articles Related to WordPress SSL Lock Not Showing : Master Checklist

  • HTTPS : Secure Hypertext Transfer Protocol

    HTTPS is an application protocol based on HTTP, for the secure transfer of data from Hyper Text, it is the secure version of HTTP.

  • Cloud Computing in the Past Year : Who Uses and Who Do Not

    Cloud Computing, has involved vendors such as Dell, EMC, HP and IBM and now facing a market that challenges them to innovate more towards cloud services.

  • Difference Between www and Non www URL

    Difference Between www and Non www URL will automatically make you to understand the fact, for a new domain today, there is no reason to use www URL anymore.

  • Databases in the Cloud : An Abstract

    Databases in the Cloud is an article where the concept as well as the various types and characteristics of cloud database provides a basic understanding.

  • Facebook Notes API : Make To Read More

    Facebook Notes API Has Some Interesting Points. Some of the features has been removed in new version of API but still some works in legacy mode.

Additionally, performing a search on this website can help you. Also, we have YouTube Videos.

Take The Conversation Further ...

We'd love to know your thoughts on this article.
Meet the Author over on Twitter to join the conversation right now!

If you want to Advertise on our Article or want a Sponsored Article, you are invited to Contact us.

Contact Us

Subscribe To Our Free Newsletter

Get new posts by email:

Please Confirm the Subscription When Approval Email Will Arrive in Your Email Inbox as Second Step.

Search this website…

 

Popular Articles

Our Homepage is best place to find popular articles!

Here Are Some Good to Read Articles :

  • Cloud Computing Service Models
  • What is Cloud Computing?
  • Cloud Computing and Social Networks in Mobile Space
  • ARM Processor Architecture
  • What Camera Mode to Choose
  • Indispensable MySQL queries for custom fields in WordPress
  • Windows 7 Speech Recognition Scripting Related Tutorials

Social Networks

  • Pinterest (22.1K Followers)
  • Twitter (5.8k Followers)
  • Facebook (5.7k Followers)
  • LinkedIn (3.7k Followers)
  • YouTube (1.3k Followers)
  • GitHub (Repository)
  • GitHub (Gists)
Looking to publish sponsored article on our website?

Contact us

Recent Posts

  • Samsung Galaxy S22 Ultra: Long Term Review June 30, 2022
  • How to Make the Most of Your S Pen (S22 Ultra) June 29, 2022
  • Safe Chargers for Samsung Galaxy S22 Ultra June 27, 2022
  • How Telecoms Can Use The Cloud To Power Their 5G Network June 24, 2022
  • A Beginner Guide to Cloud Computing for Development June 22, 2022

About This Article

Cite this article as: Abhishek Ghosh, "WordPress SSL Lock Not Showing : Master Checklist," in The Customize Windows, August 16, 2014, July 1, 2022, https://thecustomizewindows.com/2014/08/wordpress-ssl-lock-showing-master-checklist/.

Source:The Customize Windows, JiMA.in

This website uses cookies. If you do not want to allow us to use cookies and/or non-personalized Ads, kindly clear browser cookies after closing this webpage.

Read Privacy Policy.

PC users can consult Corrine Chorney for Security.

Want to know more about us? Read Notability and Mentions & Our Setup.

Copyright © 2022 - The Customize Windows | dESIGNed by The Customize Windows

Copyright  · Privacy Policy  · Advertising Policy  · Terms of Service  · Refund Policy