I finally am spending some time on websites again. Since we are planning a fundraising effort for our non-profit, I thought it would be a good idea to get my main sites to HTTPS.
Maybe/probably I did do something wrong, but its useful to share my experience here so the next person trying does not flip out so hard.
So I went the
letsencrypt route as the easiest way to do things (I am lazy).
Ordered and paid, and noticed that if I wrote https:// before the URLs, it worked, but just writing the normal URL mydomain.org (without www etc) and the links from my pages do not switch to secure https. That makes some sense, because I have absolute links and switch from friendly to standard URLs through .htaccess.
I already have my
RewriteEngine On, so according the FQ instructions, from the helpdesk and also from the forum, I added the following code to my .htaccess, just below the first RewriteEngine On:
RewriteCond %{SERVER_PORT} 80
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
Upploaded it and got a 500 Internal Server Error. Oeps.
Deleted the code, cleaned the browser, even used another browser, but the 500 ISE stayed.
Then I deleted the manipulated htaccess file and uploaded the backup which is identical to the first file. \this to make sure no unintended changed had slipped in when adding the code.
However, also no dice.
Not only that, just writing
https://www.mydomain.org directly as URL now also gives the 500 error.
So probably my updated .htaccess file triggered something that I cannot undo from here.
Now waiting for FQ to repair this or give instructions how I can repair this.
I will post updates when available.