By continuing to use this site, you agree to the storing of first- and third-party cookies on your device to enhance site navigation; analyze site, product, and service usage; and assist in our marketing and promotional efforts. Cookie Policy

Skip to Content

Switching to HTTPS

If your live site is served over HTTPS, we recommend setting up your OU Campus environment to be HTTPS-only as well. This includes both files and content resources, and site settings.

The two most important items to consider are page resources and page links.

  • Page resources are pieces of content or resources that come from some other location and are loaded on your page. This can be CSS, JavaScript, content in <iframe> tags, and even images.
  • Browsers throw a warning if any of these items are unsecured (loaded over HTTP) but displayed on a secured page (a page loaded over HTTPS). They might even block the resource entirely.
  • Page links are hard-coded links (i.e., not using dependency manager) that send users to other pages on the web or within your site.
  • Make sure any hard-coded links that point to other pages in your site are set for HTTPS. You can still have links on your HTTPS pages that point to external sites that don't use HTTPS. You can't control those sites since they aren't managed by your web server

We recommend performing the steps outlined in this guide in this order:

  1. Verify that the SSL cert is configured in your server. Do not force HTTPS yet.
  2. Complete the following sections in OU Campus.
  3. Force HTTPS at server level.

Make sure that the intermediate SSL cert is in place and configured correctly. Your IT team or hosting provider can help verify and fix this for you as needed. You can use to check your certs configuration and generate a report that you can send to your IT team or hosting provider for assistance as needed.

Switching over to HTTPS doesn’t work for some third-party codes. You would need to do some additional investigation or contact your third-party script vendor to find if they have a version that works over HTTPS. This is something we strongly suggest that you do before switching your production server over to HTTPS.

Site SettingsLink to this section

  1. In OU Campus, navigate to Setup > Sites.
  2. Hover over your site that is switching to HTTPS and select Edit > Site.
  3. In the Production Server FTP Settings section, update the HTTP Root to “https."
    A field labeled "HTTP Root," that contains a website URL, is circled in orange.
  4. Click Save.
  5. If your templates in OU Campus are stored on the production server, adjust the template directory field in site settings, also under Production Server FTP Settings, to point to https. If they're on staging, double-check your XSL to make sure any references to template locations point to https. You may need to do a find and replace on the server that hosts your templates.

Revert SiteLink to this section

  1. Go to Setup > Sites.
  2. Hover over the site and select Scan > Dependency Revert.
    The cursor hovers over the name of a website in a list. The dropdown menu "Scan" is expanded, and the option "Revert" is highlighted, with an orange arrow pointing to it.

Performing a Dependency Revert scan converts all dependency tags to root-relative or absolute links, depending on your URL Type defined in the WYSIWYG Editor section of your site settings:

The "WYSIWYG Editor" panel is shown. The field "URL Type" is circled in orange, and has a value of "Root-Relative."

Find and ReplaceLink to this section

The most important fix is for any page resources that pull content onto your pages using HTTP. This could be CSS or JavaScript being brought in from an external source, iFrame content, or images.

  1. Go to Content > Find and Replace.
    The "Content" menu of OU Campus. The "Find and Replace" dropdown is highlighted, and an orange arrow points to it.
  2. Perform a find and replace to update any hard-coded links in your domain to HTTPS. Example:
    • If you have subdomains, use the following regex:
      Find: http://([^.]+\.)?(domain\.edu)
      Replace: https://$1$2
      • Replace domain\.edu with your actual domain, and include the backslash to escape the period in the regex.

Do not change any system URLs, such as the following:

<!DOCTYPE document SYSTEM "">
<document xmlns:ouc="">

Modifying these could cause issues including broken pages.

Republish AssetsLink to this section

  1. Go to Content > Assets.
  2. Select all assets and publish.

A list of highlights. All are selected and highlighted blue. The first orange arrow points to a selection box in the header, and the second points to the header menu option "Publish."

Dependency ScanLink to this section

  1. Go to Setup > Sites.
  2. Hover over your site and select Scan > Dependency Scan.

The cursor hovers over the website in a list. The dropdown menu "Scan" is open, and the option "Dependency Scan" is highlighted, with an orange arrow pointing to it.
This runs a dependency scan on your site that converts all links back to dependency tags.

Site PublishLink to this section

  1. Go to Setup > Sites.
  2. Hover over your site and select Publish > Publish Site.

Menu options for a site appear. The "Publish" menu is expanded, and the option "Publish Site" is highlighted, with an orange arrow pointing to it.

RSS ItemsLink to this section

RSS feeds and item paths are not updated by the find and replace, and must be manually updated. If you have a lot of RSS items that require updating, our support team can run a script to accomplish this. Please request this after all other steps are complete.

OU CalendarLink to this section

If you have the OU Calendar module, you need to FTP to your production server where the calendar is installed and edit the config.php file. This file is usually located at /var/www/html/calendar/inc/config.php.

Update the CalRoot and AdminRoot variables within this file to "https."

OU SearchLink to this section

If you have the OU Search module, go to Settings > Basic Walk Settings and update your "Base URL" to "https." Re-walk your site so it is re-indexed.

If you have created any best bets, manually update their URLs to "https." Go to Tools > Best Bet Groups and click on "Manage Best Bets." Choose your best bet group and edit each best bet by clicking on the pencil icon.

Final StepsLink to this section

Afterward, we suggest running a final find for "http://", which shows all other hard-coded non-HTTPS URLs in your site. Use this to confirm that all remaining HTTP URLs on the site, after performing the above actions, are links pointing to external pages that you don't have control over.

Once all your resources and links have been converted to using HTTPS, for all sites in your account, you can enable "Always Use HTTPS" in the account settings. This has additional checks for enforcing HTTPS use in the OU Campus environment.


⇐ Return to Tutorials