HELP ME! I"M DROWNING!

[devilj]

Oh Great and Powerful osCommerce programs, have pity on us newbies.

 

I am having difficulty setting up SSL. I have configured httpd.conf to point my secure server to [documentroot]/ssl/. What I pretty much did was copy everything in fold /calaog on down into this ssl folder. Is that correct? (if not what files are supposed to be on the secure server??!!)

 

I also changed the configure files in the /catalog/include and admin/include per instructions.

 

The ssl seams to function but I go in and out of secure areas some times even on the same page. I'm so confused!!!!!

 

my site: http://www.photoshed.com

 

Any help is much appreciated.

 

Humbly yours,

DevilJ

 

http.conf:

...

### Section 2 Main server config

ServerName www.photoshed.com

DocumentRoot "/usr/local/httpd/htdocs"
....

## Virtual Hosts
<VirtualHost _default_:443>
#  General setup for the virtual host
DocumentRoot "/usr/local/httpd/htdocs/ssl"
ServerName www.photoshed.com
ServerAdmin [email protected]
...

 

catalog/include/configure.php

define('HTTP_SERVER', 'http://www.photoshed.com'); // eg, http://localhost - should not be empty for productive servers
 define('HTTPS_SERVER', 'https://www.photoshed.com'); // eg, https://localhost - should not be empty for productive servers
 define('ENABLE_SSL', true); // secure webserver for checkout procedure?
 define('HTTP_COOKIE_DOMAIN', 'www.photoshed.com');
 define('HTTPS_COOKIE_DOMAIN', 'www.photoshed.com');
 define('HTTP_COOKIE_PATH', '/catalog/');
 define('HTTPS_COOKIE_PATH', '/catalog/');
 define('DIR_WS_HTTP_CATALOG', '/catalog/');
 define('DIR_WS_HTTPS_CATALOG', '/catalog/');
 define('DIR_WS_IMAGES', 'images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
 define('DIR_FS_CATALOG', '/usr/local/httpd/htdocs/catalog/');
 define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
 define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

catalog/admin/includes/configure.php

define('HTTP_SERVER', 'http://www.photoshed.com'); // eg, http://localhost - should not be empty for productive servers
 define('HTTP_CATALOG_SERVER', 'http://www.photoshed.com');
 define('HTTPS_CATALOG_SERVER', 'https://www.photoshed.com');
 define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module
 define('DIR_FS_DOCUMENT_ROOT', '/usr/local/httpd/htdocs/catalog/'); // where the pages are located on the server
 define('DIR_WS_ADMIN', '/catalog/admin/'); // absolute path required
 define('DIR_FS_ADMIN', '/usr/local/httpd/htdocs/catalog/admin/'); // absolute pate required
 define('DIR_WS_CATALOG', '/catalog/'); // absolute path required
 define('DIR_FS_CATALOG', '/usr/local/httpd/htdocs/catalog/'); // absolute path required
 define('DIR_WS_IMAGES', 'images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
 define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');
 define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
 define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
 define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
 define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

[devilj]

Wait, I think I found out why.

 

For newbies:

 

I created my secure server on my site placing the secure area in a folder in my document tree.

 

For instance:

 

/usr/apache/htdocs/secure

 

I then copied the entire /catalog folder into /secure (Remember COPY NOT MOVE)

 

So now you have two identicle sites:

 

1 at /usr/apache/htdocs/catalog

 

2 at /usr/apache/htdocs/secure/catalog

 

 

IMPORTANT:

YOU NOW HAVE 4 CONFIGURE.PHP FILES TO MANAGE:

../htdocs/catalog/includes/configure.php

../htdocs/catalog/admin/includes/configure.php

../htdocs/secure/catalog/includes/configure.php

../htdocs/secure/catalog/admin/includes/configure.php

 

YOU MUST BE SURE THAT ALL 4 ARE CONFIGURED PROPERLY FOR SSL to WORK.

 

Since these two sites are identicle you only need to edit one set of files and copy them to its counterpart in the other server.

For instance, if you make changes to ../catalog/includes/configure.php, you must copy this file to the other server at ../secure/catalog/includes/configure.php.

 

If you are having strange problems with ssl on your site. First check ALL 4 CONFIGURE.PHP Files to make sure:

 

1) All servers (http and https) are configured to their proper server name "http://myserver.com, https://myserver.com"

2) That ENABLE SSL is set to "true"

3)Make sure Cookie_Paths, Cookie_Domains, are setup to their appropriate directories (usually '/catalog/')

 

 

That's how I did it. It worked. Enjoy

 

(god I hope i'm right!!!)