Set-up Cloudflare's SSL on a joomla site running on 000webhost.com


#1

Hi. Im trying to set-up the Cloudflare’s SSL connection to my site hosted on 000webhost.com (the free plan).
When i tryed force SSL, the site didn’t responde and chrome get the ERR_TOO_MANY_REDIRECTS error.
If I use https://trixservices.it the site load, but i have a lot of mixed contet errors.
I’ve try follow many guides, but my site still does not work.
Can someone help me?
thanks a lot!
My domain is: trixservices.it

I ran this command: I tryed force SSL “entire site”

It produced this output: Chrome output : ERR_TOO_MANY_REDIRECTS

My hosting provider, if applicable, is: 000WebHost.com

I can login to a root shell on my machine (yes or no, or I don’t know): no

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): only the 000webhost panel


#2

Hi @matt233

I don’t see a loop, but two wrong redirects and one missing. Checking your 4 standard combinations:

D:\temp>download http://trixservices.it/ -h
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: text/html; charset=utf-8
Date: Sat, 27 Oct 2018 09:22:24 GMT
Set-Cookie: __cfduid=d858f4971d15b1b53a9155026a225e0f51540632141; expires=Sun, 27-Oct-19 09:22:21 GMT; path=/; domain=.trixservices.it; HttpOnly,ceb525ff2d260e11a1b2ef1592c8fe1d=kdkk9hsgk1cs5sl2m60vtkp8mg; path=/; HttpOnly
Expires: Wed, 17 Aug 2005 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Request-ID: 4a95fae8ad9072a0259f2e0fb5e4938e
Server: cloudflare
CF-RAY: 47041902f0e1980a-FRA

Status: 200 OK

3187,68 milliseconds
3,19 seconds

http + non-www - no redirect. There should be a redirect to https.

D:\temp>download https://trixservices.it/ -h
SSL-Zertifikat is valide
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: text/html; charset=utf-8
Date: Sat, 27 Oct 2018 09:22:31 GMT
Set-Cookie: __cfduid=d15903fdb5f7f5d44c1d14b339e17833c1540632150; expires=Sun, 27-Oct-19 09:22:30 GMT; path=/; domain=.trixservices.it; HttpOnly,ceb525ff2d260e11a1b2ef1592c8fe1d=frf6rnr92bgkv1a1uvvte057cq; path=/; HttpOnly
Expires: Wed, 17 Aug 2005 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache
Pragma: no-cache, no-cache
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Request-ID: ea33bcb093be4ab580f896a7b2f925bc
Expect-CT: max-age=604800, report-uri=“https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct
Server: cloudflare
CF-RAY: 4704193efc3397e0-FRA

Status: 200 OK

1364,90 milliseconds
1,36 seconds

https + non-www - no redirect, this is good.

D:\temp>download http://www.trixservices.it/ -h
Transfer-Encoding: chunked
Connection: keep-alive
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Request-ID: 61b41f131972febb8f058bb91def4000
CF-RAY: 47041a0a712d96be-FRA
Content-Type: text/html; charset=iso-8859-1
Date: Sat, 27 Oct 2018 09:23:03 GMT
Location: http://trixservices.it/
Set-Cookie: __cfduid=d9c38fc47f3f9a99afbb2130b62a07dce1540632183; expires=Sun, 27-Oct-19 09:23:03 GMT; path=/; domain=.trixservices.it; HttpOnly
Server: cloudflare

Status: 301 MovedPermanently

406,16 milliseconds
0,41 seconds

This is a redirect http + www -> http + non-www, this is wrong. That should be http + www -> https + www.

D:\temp>download https://www.trixservices.it/ -h
SSL-Zertifikat is valide
Transfer-Encoding: chunked
Connection: keep-alive
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Request-ID: 2612cca921b6fe597cd6bf8f1051865b
Expect-CT: max-age=604800, report-uri=“https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct
CF-RAY: 47041a77e8c0bf16-FRA
Content-Type: text/html; charset=iso-8859-1
Date: Sat, 27 Oct 2018 09:23:21 GMT
Location: http://trixservices.it/
Set-Cookie: __cfduid=d5cc580f2b4cb3991747ec3c172b557571540632200; expires=Sun, 27-Oct-19 09:23:20 GMT; path=/; domain=.trixservices.it; HttpOnly
Server: cloudflare

Status: 301 MovedPermanently

498,82 milliseconds
0,50 seconds

This is definitively wrong: https + www to http. https should never redirect to http.

Then check your mixed content. FireFox or Chrome (Desktop), Ctrl + Shift + I, then the console. There you see the wrong links.

http://trixservices.it/media/plg_jchoptimize/cache/6fdc642 ...

So CSS- and JavaScript files are missing.


#3

thanks a lot for your answer @JuergenAuer. I will try to fix