False alerts about SSL

Hi @simbalion,

This notification will show if the Site Address (URL) under Settings > General does not contain HTTPS. Can you confirm the address there contains https://?

Yes absolutely. All the sites I manage are either HTTPS only or force redirection to HTTPS.

I thought maybe it was caused by the redirection so I tried a full page refresh a few times but it kept reporting falsely until I dismissed it.

I use some fairly strict SSL settings to get an A+ rating, here they are in case it helps:

`
## SSL Configuration ##
ssl_certificate /etc/ssl/mycert.crt;
ssl_certificate_key /etc/ssl/mypriv.key;
ssl_session_timeout 5m;
add_header Strict-Transport-Security “max-age=63072000; includeSubdomains; preload”;
add_header Content-Security-Policy upgrade-insecure-requests;
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS;
ssl_buffer_size 8k;
ssl_session_cache shared:SSL:30m;
ssl_dhparam /etc/ssl/dhparams.pem;
ssl_stapling on;
resolver 8.8.8.8;
resolver_timeout 10s;
ssl_stapling_verify on;
`

Hi @simbalion

Could you provide a screen shot of the Settings > General page ( https://cld.wthms.co/DacRMR ) or the Status report of the site located at WooCommerce > Status. A screen shot of the Advanced tab would be helpful as well ( https://cld.wthms.co/7HRZGL ).

Thanks,

No, as I said I already dismissed the notice.

This may have been related to the other issue I had. The solution to that was to explicitly declare woocommerce support in my theme. Without that declaration certain functions appeared to not execute at all, and I wonder if that could be why the SSL test failed.

Can you tell me what Payment gateway you’re using? It may be that the payment gateway is requiring a legacy setting to force Secure Checkout to be enabled.

Reference: https://github.com/woocommerce/woocommerce/issues/20229#issuecomment-392011124

Stripe & Paypal

Can you provide us with the Status report from WooCommerce > Status?

We haven’t heard back from you in a while, so I’m going to mark this as resolved – if you have any further questions, you can start a new thread.