Odoo Help

0

0
3 Answers
0
Avatar

Ermin Trevisan

--Ermin Trevisan--
10918
| 7 6 9
Walchwil, سويسرا
--Ermin Trevisan--


Ermin Trevisan
12‏/3‏/2018 9:34 م

Odoo.sh does not support SSL (yet). Odoo does recommend to use a third party service such as Cloudflare, but this is not a real solution. Please read first how it works and why Cloudflare itself does not recommend to use this option "Flexible SSL" for security reasons: https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-SSL-options-mean-

It should only be used as a last resort if you are not able to setup SSL on your own web server, but it is less secure than any other option (even “Off”), and could even cause you trouble when you decide to switch away from it: How do I fix the infinite redirect loop...


So you should not downvote the messenger, but the lack of service from Odoo. To me this is a show stopper for odoo.sh.

4 Comments
Red Lab Media , Bruce Letterle
12‏/3‏/2018 9:45 م

Actually, the FAQ at odoo.sh says this about SSL- "To enable SSL, you can use a third-party CDN service provider such as CloudFlare.com.". I've setup SSL at Cloudflare and I can access my site using https:

Ermin Trevisan
13‏/3‏/2018 2:16 ص

You can be sure that I'm very well able to read the documentation. Secondly, you should really try to understand what it is all about in the first place. Cloudflare is a third party provider and not Odoo. Therefore my statement is 100% correct and you should well be aware about the corresponding security risks, as elaborated in my amended answer.

Red Lab Media , Bruce Letterle
13‏/3‏/2018 8:20 ص

First, I should clarify that I am not using this website for ecommerce or anything that requires a valid SSL solution. I am just addressing the fancy green lock symbol issue for SEO and the Cloudflare SSL addresses this. Your answers are entirely correct and I completely agree that Odoo needs to fix this on Odoo.sh. For me to implement a complete secure solution for a client, we would move to our own servers and not use odoo.sh.

Yenthe Van Ginneken
31‏/8‏/2018 10:07 ص

This is actually a good and valid answer, which shouldn't have had a downvote honestly. I've accepted your answer as it is the truth and it is a lack in SH.

0
Bruce Letterle
12‏/3‏/2018 9:48 م

Thanks to Ermin's answer, I just checked the Cloudflare support articles and found the answer. In the Crypto section, there is an option called Always use HTTPS. It will redirect all requests with scheme “http” to “https”. This applies to all http requests to the zone. Seems to work perfectly!

1 Comment
Ermin Trevisan
13‏/3‏/2018 2:25 ص

Seeing a fancy green lock symbol in your browser is not the whole story. Read first what it is all about and why Cloudflare itself is not recommending using "Flexible SSL" in the link of my amended answer.

Ask a Question
Writer
Keep Informed
1 follower(s)
About This Community

This platform is for beginners and experts willing to share their Odoo knowledge. It's not a forum to discuss ideas, but a knowledge base of questions and their answers.

Register
Odoo Training Center

Access to our E-learning platform and experience all Odoo Apps through learning videos, exercises and Quizz.

Test it now