I would suggest letting it run longer. My personal site (on WPEngine) took over 40 minutes to complete… I did have to have WPE support run the command for me because their shell time’s out to quickly.
If you are concerned… check your error logs on WPEngine (you can filter by your IP address), if nothing in there, enable WP_DEBUG in your wp-config.php, run the command, then check the wp-content/debug.log
Please keep me posted how you make out with this… my personal site is the only one I tested the CLI on WPEngine. (I have a hard time with their support teams, and actually have to deal with them on a daily basis for my day job… difference being 40+ dedicated servers, and 700+ account) Do note, I have this plugin installed on 20% of those sites… though none utilize the cli for anything
-
This reply was modified 4 years, 1 month ago by
Kevin Pirnie.
Thread Starter
SRD75
(@srd75)
Thanks.
WP Engine advised to edit my ~/.ssh/config file to add below Host: ServerAliveInterval 60.
Host example
ServerAliveInterval 60
This allowed the process to be completed.
Thread Starter
SRD75
(@srd75)
I received a success message through Terminal, but when I visit /wp-admin/admin.php?page=wpsh_settings#tab=content-security-headers I see:
Generate CSP? OFF
Is there anything more I need to do?
There isn’t much on your plugin home page explaining this.
@srd75
It cannot work if you did not turn it on… I will update the documentation to reflect this in the next update.
Great to know about the SSH config, and glad they actually suggested something useful 😉
-
This reply was modified 4 years, 1 month ago by
Kevin Pirnie.
Thread Starter
SRD75
(@srd75)
I turned on “Generate CSP?” @ /wp-admin/admin.php?page=wpsh_settings#tab=content-security-headers, and also turned on “Include WordPress Defaults?”.
I then ran wp csp generate, which produced a success message.
When I refreshed /wp-admin/admin.php?page=wpsh_settings#tab=content-security-headers I only saw the WordPress Defaults.
@srd75
I clearly state in the description of the plugin… and I quote
Please make sure to run it a few times, I cannot guarantee that it will get everything
Yes… in my specific tests, it did indeed get everything I needed it to get. I am not you, my sites are not yours, thus your mileage will vary from mine.
What I would recommend is to read through the documentation in the plugin, and compile your own Content Security Policy.
You need to keep in mind that a Content Security Policy will never be a one-shot-and-done type of configuration no matter what route you decide to use for your website, and you will be spending alot of time configuring, testing, reconfiguring, re-testing, etc…
Thanks