Feature Available by Site: allow for www.boatname.crew-mgr.com

If you have a suggestion for a new feature or modification, please post in this forum.
Post Reply
dancorcoran
Posts: 34
Joined: Mon Jan 21, 2019 3:58 pm
Location: Huntington, NY
Contact:

Feature Available by Site: allow for www.boatname.crew-mgr.com

Post by dancorcoran »

Currently, if someone chooses www.boatname.crew-mgr.com, Windows 10 versions of Microsoft Edge and Google Chrome default to HTTP:// which generates a certificate error (whereas HTTPS:// will not). While users can overcome this error, the error scares some users.

When sending links to our websites, remember to send HTTP://boatname.crew-mgr.com
User avatar
admin
Site Admin
Posts: 302
Joined: Fri Dec 28, 2018 11:51 am
Location: Portsmouth, RI
Contact:

Feature on hold: allow for www.boatname.crew-mgr.com

Post by admin »

Dan,

I am aware of that and checked with the Crew Manager website host provider on why the SSl connection breaks when www is added to a subdomain as a prefix. The subdomains are setup automatically using the WordPress Multisite feature. The following response was provided by the host provider.
We are using AutoSSL feature in cPanel to automatically issue LetsEncrypt certificates. So we contacted cPanel support take a look into this issue.

We received the following update from them.
I researched the matter and found the following LetsEncrypt feature request:

https://community.letsencrypt.org/t/mul ... e/113577/8

As explained on that page, it is not possible to issue a wildcard certificate that covers multiple levels of subdomains.

It would not be possible to issue wildcard certificates for domains such as these:

*.*.domain.com
sub.*.domain.com


However, it would be possible to issue a wildcard certificate for a wildcard domain such as this:

*.sub.domain.com

So we wont be able to enable wild card ssl certs for www.*.crew-mgr.com at the moment as Let's Encrypt SSL does not provide this feature now.

Please get back to us if you need any further assistance.
So until the SSL Certificate provider makes changes to their automated certificate algorithim, this can't be done. Note that all the internal links on Crew Manager are provided without the www prefix, and automatically allow the browser to provide a secure connection with a lock symbol. It is only when someone manually adds the www to a URL that the SSL connection is broken, and the site reverts to http://www.xxxxxxxxxx rather than https://www.xxxxxxxx

This is more of an inconvenience rather than a security problem since removing (or not adding) www will always provide a secure SSL connection.
Crew Manager Administrator
Image
User avatar
admin
Site Admin
Posts: 302
Joined: Fri Dec 28, 2018 11:51 am
Location: Portsmouth, RI
Contact:

Feature Available by Site: allow for www.boatname.crew-mgr.com

Post by admin »

Dan,

I have figured a way to accommodate the Strider site with a manual update in the control panel for subdomain creatiuon using *.sitename.crew-mgr.com redirection. The www prefix should now work on your site.

If any other Skippers desire to have their site work both with or without the www prefix, post here and I will make the change for that site.
Crew Manager Administrator
Image
Post Reply