One Click SSL

1. 

   Testing utility to check if SSL is supported on the hosting so that the website doesn't become inaccessible.

2. 

   Easily enable SSL with a single click after confirming SSL support.

3. 

   If you are already on SSL (https://) the plugin will tell you that and no action is required.

4. 

   Configure your SSL to run on specific sections and behave in a certain way as required.

What is SSL?

SSL stands for Secure Sockets Layer and it is a protocol which encrypts all data in transit on your website to prevent theft, interception, and/or hacking.

What is TLS?

TLS stands for Transport Layer Security and supercedes SSL. It is a newer protocol and functions relatively the same as SSL but with improved security and compatibility.

What is the difference between SSL and TLS and why do we still refer to TLS certificates as SSL certificates?

TLS offers stronger encryption than SSL as SSL is outdated and has vulnerabilities. SSL certificates are actually TLS certificates, as TLS has replaced SSL.
For familiarity and marketing reasons, almost everyone still refers to TLS as SSL.

What is required to use SSL?

You need to have SSL/TLS support on your hosting/server. This is done by installing an SSL/TLS certificate.

Is SSL mandatory?

While SSL is not mandatory, it is highly recommended for the security and peace of mind of your users. And, all Internet browsers are warning users about insecure websites, and search engines rank you lower if you do not activate SSL. It is practically a must now.

Hide FAQ

See all releases and full changelogs in our docs.

1.7.7

• FIX: Critical error when debug mode is active and SSL is not available.

1.7.6

• ADD: “Turn on debuging” toggle in plugin settings page.
• FIX: Prevent fatal error by ensuring $ocssl instance is initialized before load_plugin_data() is called.

1.7.5

• IMPROVE: Updated “Tested up to” tag for compatibility with WordPress v6.8.3.

1.7.4

• FIX: Added proper nonce verification for rating notice dismissal.

1.7.3

• ADD: Automatic Basic Authentication detection, allowing you to bypass htpasswd basic auth to check for SSL support.
• ADD: Added support for the insecure resources scanner in WordPress multisite network admin, allowing network administrators to scan sites for HTTP resources.
• IMPROVE: Detecting the protocol in tags.
• IMPROVE: All General Settings and the Insecure Resources Scanner now display in Multisites as well.
• IMPROVE: Code updates.
• FIX: Incompatibility with Ultimate Addons for Beaver Builder.
• FIX: Wrong redirection after saving configuration in multisite.
• FIX: PHP 8.3/8.4 error.
• FIX: Insecure Resources Scanner detecting the SVG xmlns attributes as insecure content.
• FIX: Insecure Resources Scanner now works well with different URLs, especially in multisites.
• FIX: Insecure Resources Scanner now displays the full URLs of insecure resources (e.g.: http://example.com/image.jpg).
• FIX: Move the admin menu option was not working in multisites. So, in multisites, it will now move it under the Settings menu.
• FIX: A few bugs found in multisite networks.

1.7.2

• FIX: Plugin assets failed to load due to the previous update concerning WordPress 6.7 textdomain compatibility.

1.7.1

• FIX: Bug after v1.7.

1.7

• FIX: Compatibility with WordPress 6.7 textdomain.

1.6

• FIX: AJAX calls error after update. If you are unable to update your plugins after using v1.5, use FTP to update to this version. In wp-content/plugins, you can either remove the folder for One Click SSL and reinstall in WordPress, or overwrite all files with the files from this archive.

1.5

• IMPROVE: PHP 8.3 compatibility. Do not use this version. Skip to v1.6.

1.4.9

• ADD: “Dismiss forever” button on the admin area rating notice to dismiss it forever.
• IMPROVE: Text improvements.
• FIX: Avada theme conflict (critical error when Avada was active).

1.4.8

• IMPROVE: WordPress 6.1 compatibility.
• IMPROVE: PHP 8.1 compatibility.
• IMPROVE: Text improvements.

1.4.7

• IMPROVE: Setup page improvements.
• IMPROVE: Security fixes and improvements.

1.4.6

• IMPROVE: WordPress 5.2 compatibility.
• FIX: Metaboxes not opening/closing.

1.4.4

• IMPROVE: WordPress 5.0 compatibility.

1.4.3

• ADD: SSL certificate info/status box.
• IMPROVE: About box on the settings page with useful links.
• IMPROVE: Ask for a rating on WordPress.org after a while.
• IMPROVE: Make SVG elements secure enhancement.

1.4.2

• ADD: Turn off SSL on deactivation of plugin.
• ADD: Admin notice when not running on SSL (https).
• IMPROVE: Improved insecure resources scanner accuracy.
• IMPROVE: Notice: curl_setopt(): CURLOPT_SSL_VERIFYHOST value 2.

1.4.1

• ADD: SSL (https) tester to scan the website for insecure resources.

1.4

• ADD: New settings screen layout with postboxes.
• ADD: Override option when checking SSL support.
• IMPROVE: Load JS/CSS only on One Click SSL sections/screens.
• IMPROVE: Don’t check the site title/name when verifying SSL.
• IMPROVE: Update styling for WordPress 4.8+.

1.3.1

• IMPROVE: Verify that SSL certificate is valid enhancement.
• IMPROVE: Do not check and redirect SSL when SSL support is checked enhancement.
• IMPROVE: Use wp_remote_get() when PHP CURL is unavailable.

1.2

• ADD: Setting to move the admin menu item under Tools.
• IMPROVE: Apply replace_https to WordPress language_attributes filter hook.
• FIX: Regular expression issue which can break Ajax in some areas.
• FIX: PHP output buffer issue.

1.1

• ADD: Multisite network SSL support.
• ADD: Setting to redirect to non-SSL when SSL is turned off.
• FIX: Replace HTTPS breaks on filters with Array/Object data.

1.0

• Initial release of the plugin.