- April 27, 2018 at 4:45 am #93129Scott MillerParticipant
Just installed the plugin. It said something about the HSTS preload list and that I have to get Premium.
So I paid $25 and there is no green check mark by
“- Your site is not yet configured for the HSTS preload list. Read the documentation carefully before you do! Enable the preload list”
No green check mark by this either
“- The mixed content fixer is not active on the admin panel. Enable this feature only when you have mixed content on the admin panel. ”
And when people go to my site they get this nice message
“This connection is not private. This website may be impersonating “my website” to steal your personal or financial information. You should close this page.”
I’m on Hostgator if that helps. Would somebody please tell me how to fix this mess?April 27, 2018 at 7:30 am #93149
This message in your browser means your SSL certificate is not valid. This is also the reason the plugin tells you the mixed content fixer is not detected. You can check what the problem is with your SSL certificate by running a scan on https://ssllabs.com/ssltest
Let me know if you have any questions.April 28, 2018 at 7:46 pm #93397Scott MillerGuest
I ran the test as you suggested and received all A’s.
Looks like everything is working with one exception.
When people go to my site it does not redirect them from http to https
all the other pages of the site are https.
What do I need to do to get the auto redirect from http to https?
ScottApril 28, 2018 at 8:58 pm #93403
If the default wp redirect does not redirect the homepage to https, I would recommend to enable the .htaccess redirect in settings/ssl. For more info on this see:
https://really-simple-ssl.com/knowledge-base/redirect-https-not-working/April 28, 2018 at 9:24 pm #93406Scott MillerGuest
You said ” I would recommend to enable the .htaccess redirect in settings/ssl.”
I do not see any such thing in settings.
I do see Enable WordPress 301 redirection to SSL which is checked
I also see “Enable 301 .htaccess redirect” which is not checked
Also not checked
Stop editing the .htaccess file
Switch mixed content fixer hook
Configure your site for the HSTS preload list
I feel like I’m so close!
Thanks for your help,
Scott MillerApril 29, 2018 at 4:19 pm #93523
Yes, you’re very close 😉
If you check “Enable 301 .htaccess redirect”, the redirect should be forced.February 16, 2020 at 10:13 am #337670ChantelGuest
Mine is not configured for HSTS Preload either after purchasing Really Simple SSL that is the only thing left unchecked? How do we resolve this issue?February 16, 2020 at 7:46 pm #337769
Hi Chantel, did you enable the HSTS option in settings/ssl/settings? If you enable it, then enable the preload option, you can submit your site to hstspreload.org.