Common errors related to securing your website with SSL

View as Markdown

Find out how to avoid common errors in securing your website with SSL

Objective

In this tutorial, you will find some examples of situations you may encounter when securing your website with SSL.

Information regarding OVHcloud service administration and how to find appropriate assistance

When using OVHcloud guides, please be aware of the following conditions:

  • User instructions aim to provide as many details as possible but cannot cover individual use cases. You might need to adapt the pertinent actions to your requirements.
  • The OVHcloud ecosystem is built for flexibility and freedom of choice. Customers are therefore responsible for the secure and proper configuration of their services. To prevent data loss, we strongly recommend to apply backup strategies to all your important data.
  • Our guides and tutorials may reference third-party software or services in combination with OVHcloud solutions. The technical support provided by OVHcloud does not include the configuration of systems or products outside of our responsibility. This includes but is not limited to:
    • Operating systems and user interfaces (Windows, Debian, Plesk, etc.).
    • Any other third-party software (FTP clients, email software, etc.).
    • Services offered by other providers (DNS, APIs, user interfaces, etc.).

To receive the appropriate assistance for any issues you might experience, follow these guidelines:

  • You seek personalized advice or you would like to discuss a topic that is not covered in detail by our documentation?
    Join the OVHcloud Community to search for your topic and reach out to other users.
  • You need to report an incident regarding your OVHcloud service or you are experiencing difficulties in the OVHcloud Control Panel?
    Create a support request in our Help Centre.
  • You require professional assistance for your project or you need help with tasks outside our support scope?
    Visit our partner portal to search for experts who are familiar with OVHcloud solutions.
  • You are looking for more detailed information regarding our support levels and Professional Services?
    Please visit our web pages for OVHcloud support levels and OVHcloud Professional Services.

You can participate in improving our documentation:

  • You would like to share feedback to improve a guide page or you want to report insufficient information on a specific page?
    Use the "Was this page helpful?" buttons at the bottom of the page to let us know.
  • You would like to propose a specific documentation update?
    Use the "Edit this page" function, available at the bottom of the page and in the sidebar.

This guide explains how to avoid common website security errors with SSL.

Requirements

Instructions

Mixed content

Does your website not load external elements, such as the Facebook and X/Twitter buttons? Do interactions on your web pages not work the same way as when you access your website in HTTP? This is probably because your website contains mixed content.

In recent years, browsers such as Google Chrome, Mozilla Firefox and Microsoft Edge/Internet Explorer have prevented websites with HTTPS from loading page elements if they are accessible via a URL with HTTP. This is so that the confidentiality provided by the HTTPS protocol is not compromised by an element loaded with HTTP.

In most cases, these are external scripts, from other websites such as social networks. In this case, you just need to replace the URLs in HTTP with URLs in HTTPS in your scripts to load these scripts.

Info

Some websites use a Content Delivery Network (CDN) to host, for example, Javascript libraries (such as JQuery). If the CDN delivers the library with a URL in HTTP, your website may be affected by mixed content.

How do I know if my website is affected?

The debugging tools provided by Mozilla Firefox and Google Chrome can tell you whether or not your website contains items blocked due to mixed content. The documentation available on the Mozilla Developer Network explains how to use these tools to identify mixed content.

Duplicate content

Duplicating content means having the same content on multiple different URLs. Search engines see this as an attempt to improve SEO. This means that websites with duplicate content are penalised.

To avoid this type of situation, when your website works properly in HTTPS, we recommend redirecting the content from HTTP to HTTPS. This will allow your visitors to be automatically redirected to the address of your web content in HTTPS and only one address will be available for this same content.

Here is an example of a redirection that you can add to the file ".htaccess", at the root of your website (by replacing the URL https://www.yourdomain.tld with your own):

RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://www.yourdomain.tld/$1 [R,L]

Go further

For specialised services (SEO, development, etc.), contact OVHcloud partners.

Join our community of users.

Was this page helpful?