Opinions on best SSL config using WordPress

[CityBloc]

Hi:

I am about to obtain an SSL cert for an as yet undeveloped WP site running Civi and Apache2 on Ubuntu that I want to take donations using a single form, /donate. 

I want to know what a working config looks like here.  Can anybody share details of working configs that aim to SSL-protect a single donor page on a Civi-WP site? 

Is using a subdomain suggested, and why? 

How do I tell Apache to use SSL for /donate and for nothing else?  Are there pros or cons to making all traffic go through SSL instead of protecting /donate alone?

Thanks for any thoughts.

[Kevin Cristiano]

Hi CityBloc,

Are you installing the entire WordPress site in /donate or are you just looking for a page at /donate?   Also will this be single site or multi-site?

[CityBloc]

Hi Kevin:

I'm looking to have a single page of a WordPress site be a page named /donate that calls the Civi donor form via shortcode.

This is single-site.

Thanks.

[Kevin Cristiano]

Hi,

I tend to try and make the whole site SSL, if that is not an option, this WordPress plugin works well on single-site installs:  http://wordpress.org/plugins/wordpress-https/ 

As long as you have the proper SSL certificate, I tend to set the CiviCRM base url as the secure url in civicrm.settings.php

define( 'CIVICRM_UF_BASEURL'      , 'https://example.com/' );

[CityBloc]

Hi,

I tend to try and make the whole site SSL, if that is not an option, this WordPress plugin works well on single-site installs:  http://wordpress.org/plugins/wordpress-https/ 

As long as you have the proper SSL certificate, I tend to set the CiviCRM base url as the secure url in civicrm.settings.php

define( 'CIVICRM_UF_BASEURL'      , 'https://example.com/' );

I've done this (added and configged Wordpress-HTTPS) and I have a problem.  No URLs deeper than https://domainname.com answer, they all 404 instead.  The https server is answering on port 443, it passes checks.   But WordPress is not answering when a request for https://domainname.com/donate  comes in.

I don't get it.

[Kevin Cristiano]

Sorry I missed your response.  Is the WP site URL set to http or https?  This can make a difference as the rewrite rules will trigger off the settings in the options table. 

Not sure why the plugin fails, we've been able to use it exactly as you describe.