# Fixing SSL and Security issues **URL:** \ **Category:** Developer help\ **Created:** [September 13, 2021, 4:51pm UTC](https://forum.ghost.org/t/fixing-ssl-and-security-issues/25620 "2021-09-13T16:51:02Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![jorger](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/jorger/32/15037_2.png) [@jorger](https://forum.ghost.org/u/jorger)\ **Post date:** [September 13, 2021, 4:51pm UTC](https://forum.ghost.org/t/fixing-ssl-and-security-issues/25620/1 "2021-09-13T16:51:02Z")
I have installed Ghost through CLI tool, without issues. I bought a domain and ssl, but I’m unable to make it work, ghost is pointing to https but it gives me error on browser saying certificate isn’t valid. I also tried some website checks (for example [https://sitecheck.sucuri.net/results/www.opensourcefacil.com](https://sitecheck.sucuri.net/results/www.opensourcefacil.com)) and it recommends me: > ### TLS Recommendations > > TLS Recommendation > No redirect from HTTP to HTTPS found. You should [redirect your website visitors to the HTTPS version Also some fixing related to security website headers. After running [snyk.io](http://snyk.io) website test it says that my versions of angular, jquery, buefy and lodash are vulnerable, but I don’t really know how to update them. If you aren’t running the latest version of Ghost, the first thing we will ask you to do is update to the latest version of Ghost. - **What’s your URL**? [https://www.opensourcefacil.com](https://www.opensourcefacil.com) - **What version of Ghost are you using?** Latest also latest on ghost-cli And - How was Ghost installed and configured? Through Ghost-cli - What Node version, database, OS & browser are you using? Not sure Thanks for everything! ---
**Author:** ![DonaldH](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/donaldh/32/13880_2.png) [@DonaldH](https://forum.ghost.org/u/DonaldH)\ **Post date:** [September 13, 2021, 5:00pm UTC](https://forum.ghost.org/t/fixing-ssl-and-security-issues/25620/2 "2021-09-13T17:00:11Z")
> [@jorger](#): > > I have installed Ghost through CLI tool, without issues. > I bought a domain and ssl, but I’m unable to make it work, ghost is pointing to https but it gives me error on browser saying certificate isn’t valid. You installed Ghost, and then bought a domain, in that order? Because you would have needed to access the DNS and have an A record pointing your domain name to your server’s IP address, and to have these DNS records updated and propagated fully prior to installing Ghost and setting up an SSL certificate properly. If you purchased your domain _after_ installing Ghost, that could be the cause of your issue. ---
**Author:** ![jorger](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/jorger/32/15037_2.png) [@jorger](https://forum.ghost.org/u/jorger)\ **Post date:** [September 13, 2021, 5:07pm UTC](https://forum.ghost.org/t/fixing-ssl-and-security-issues/25620/3 "2021-09-13T17:07:08Z")
Thanks for the answer! Correct, I installed ghost then bought the domain. What should I do to fix it? ---
**Author:** ![DonaldH](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/donaldh/32/13880_2.png) [@DonaldH](https://forum.ghost.org/u/DonaldH)\ **Post date:** [September 13, 2021, 5:11pm UTC](https://forum.ghost.org/t/fixing-ssl-and-security-issues/25620/4 "2021-09-13T17:11:38Z")
Nuke it. Set up your DNS and wait for the A record to [propagate](https://dnschecker.org/) then redo the Ghost installation process. I don’t know which webhost you are using, but if you are using DigitalOcean, there is an official “1-Click” Ghost app on their marketplace that makes installation a breeze. ---
**Author:** ![jorger](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/jorger/32/15037_2.png) [@jorger](https://forum.ghost.org/u/jorger)\ **Post date:** [September 13, 2021, 5:18pm UTC](https://forum.ghost.org/t/fixing-ssl-and-security-issues/25620/5 "2021-09-13T17:18:55Z")
Can I save anything? I mean, I created some articles and did all the web, isn’t there a way to keep this? ---
**Author:** ![DonaldH](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/donaldh/32/13880_2.png) [@DonaldH](https://forum.ghost.org/u/DonaldH)\ **Post date:** [September 13, 2021, 5:32pm UTC](https://forum.ghost.org/t/fixing-ssl-and-security-issues/25620/6 "2021-09-13T17:32:31Z")
Okay, I assumed you’d only just started when I suggested the nuke it from space option 😂 But you can [export](https://ghost.org/help/the-importer/) your content (articles) via the Ghost admin dashboard and then reimport it into a fresh installation. You can also save any code you’ve added in the “code injection” section and download your theme (if you’ve made any changes to the template files) and then reinstall your modified theme on the new website. You can keep the one you have if you like, but you’ll need to find a way to fix the SSL/certificate issues that arose because the installation was done (or attempted) prior to configuring the A record for your domain. ---
**Author:** ![jorger](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/jorger/32/15037_2.png) [@jorger](https://forum.ghost.org/u/jorger)\ **Post date:** [September 13, 2021, 5:34pm UTC](https://forum.ghost.org/t/fixing-ssl-and-security-issues/25620/7 "2021-09-13T17:34:15Z")
Thanks again, I will try doing backups of everything you said and will post with updates after reinstalling! ---
**Author:** ![DonaldH](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/donaldh/32/13880_2.png) [@DonaldH](https://forum.ghost.org/u/DonaldH)\ **Post date:** [September 13, 2021, 5:37pm UTC](https://forum.ghost.org/t/fixing-ssl-and-security-issues/25620/8 "2021-09-13T17:37:58Z")
You’re very welcome, and please consider marking my initial response as a solution to your issue so that others can see that it has been resolved. ---
**Author:** ![jorger](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/jorger/32/15037_2.png) [@jorger](https://forum.ghost.org/u/jorger)\ **Post date:** [November 23, 2021, 6:45pm UTC](https://forum.ghost.org/t/fixing-ssl-and-security-issues/25620/9 "2021-11-23T18:45:22Z")
I know some time passed but I finally got the solution for the problem, I don’t know why but my domain provider didn’t had HTTPS properly set so I changed to another and now everything works perfect.