SSL

Really Simple SSL 3.1.0

Over the past few weeks we have made a number of improvements to the free Really Simple SSL plugin. The 3.1.0 version of Really Simple SSL is released as of today, community feedback is much appreciated. This version includes the following tweaks and fixes:

  • Tweak: added HTTP_X_PROTO as supported header
    These headers are used to detect if a request is an SSL request. If not, the request should get redirected to https. WordPress can only detect $_SERVER[‘https’]=’on’, so if there’s another header, this one needs to be set in the code to prevent WordPress from getting into a redirect loop.
  • Tweak: split HTTP_X_FORWARDED_SSL .htaccess redirect into a variation which can be either ‘1’ or ‘on’
  • Tweak: improved certificate detection by stripping domains of subfolders.
  • Tweak: Multisite bulk SSL activation now chunked in 200 site blocks, to prevent time out issues on large multisite networks.
    As until now, network wide activation was done in one go, this could cause timeout issues when there were more than 2000 sites.
  • Tweak: a ‘leave review’ notice for new free users.

Any testing and feedback is more than welcome! The dev version of the plugin can be accessed on github:

https://github.com/rlankhorst/really-simple-ssl

Related Articles

  • Really Simple SSL 2.2.16 released

    Some of you might have noticed, but the release of 2.2.13 didn’t go as smoothly as planned. During extensive testing and a beta period there didn’t come up anything, so...
  • Really Simple SSL entered the hot 100

    This morning I saw several Twitter messages, mentioning that Really Simple SSL is now included in the hot 100 from godaddy. https://garage.godaddy.com/wordpress-hot-100/ This sounds pretty cool, though to be honest...
  • New security headers for Really Simple SSL pro coming up

    SSL is an additional layer of security on your site. In the current version of Really Simple SSL pro we already have added HSTS, and HSTS preload, which prevents your...
  • Really Simple SSL 2.5.24 – minor multisite fix

    Today Really Simple SSL 2.5.24 was released. Apart from the renaming of a css class, there was only one important change, and this one affecting only sites which: are multisite...