Wordpress, SSL and Lets Encrypt

wordpress

#1

Apologies if this has been addressed in another thread or sticky, I’ve had a search and couldn’t find an answer.

I’m a new Dreamhost customer, using Wordpress on my site. I was hoping to be able to use the ‘Let’s Encrypt Verified SSL’ free certificate but the website doesn’t appear to be using it yet. Do I need to do anything to configure Wordpress to use the cert or will it happen automatically at some point? I only signed up for the cert 2 days ago so I’m guessing it’s just a delay in certificate provisioning?

Thanks in advance for any assistance.


#2

Which pages do you want to be secure? If there are only a few (like a store page that collects payment info) then there are plugins that can force those pages to load with encryption.

If you want every page to load with encryption, follow the instructions on this page:


#3

Actually try manually typing https://siteurl
That’s probably working. Once it is then you need an .htaccess directive to force http traffic to https.


#4

And if that’s working, then you should also go into Wordpress settings (General) to set the Wordpress and Site Address to https.


#5

The ‘best’ way right now:

  1. Change home and site URLs to https
  2. Configure .htaccess to force https
  3. Install https://wordpress.org/plugins/wordpress-https/

The only reason I recommend #3 is that a distressingly large number of plugins and themes hardcode http into their enqueues :confused: