SSL

[craigglawson]

Hey Guys

 

I'm new to this SSL thing, all i know is that its Single Socket Layer, and its for encryption of details.

 

How do i get it to work over the whole shop once i have the SSL certificate from my domain host?

 

Craig

[Guest]

"Secure Socket Layer" :D

 

Configuring osCommerce for SSL is quite straightforward - you must have the correct info at hand.

 

There are two files to edit - catalog/includes/configure.php and admin/includes/configure.php - I shall give examples using the former:

 

  define('HTTP_SERVER', 'http://your_domain.com'); // eg, http://localhost - should not be empty for productive servers

  define('HTTPS_SERVER', 'https://your_secure_domain.com'); // eg, https://localhost - should not be empty for productive servers

  define('ENABLE_SSL', true); // secure webserver for checkout procedure?

  define('HTTP_COOKIE_DOMAIN', 'your_domain.com');  // do not include 'http://'

  define('HTTPS_COOKIE_DOMAIN', 'your_secure_domain.com');

  define('HTTP_COOKIE_PATH', '/catalog/');

  define('HTTPS_COOKIE_PATH', '/catalog/');  // sometimes you are required to enter a secure directory - with a shared certificate it is usually something like /~yoursite/catalog/  - your webhost will give you this info

  define('DIR_WS_HTTP_CATALOG', '/catalog/');

  define('DIR_WS_HTTPS_CATALOG', '/catalog/'); //same as above the HTTPS_COOKIE_PATH

 

Your webhost will give you all the info you require to fill the above.

 

Matti

[Amylola]

:D Matti - your posting was VERY helpful. It got the SSL working on my site. One question, though. Once I've completed the checkout process and followed the prompts back to the home page, I'm still in https mode. How do I make the site revert back to http mode once checkout is complete?

 

Thanks so much. You're a supergenious!

 

~amylola

[Amylola]

:blush: Duh. Just realized that once I click on anything on the home page it takes me back to normal mode. Ok, feeling a little slow today. Never mind about my last question.

 

cheerio

~amylola

[Amylola]

>_< It's me again. I've just discoverd that once I've completed the order process and am brought back to the home page (still in https mode) there ARE some links from my home page (the top navigation) that still stay within the SSL. Is there anyway to have the site revert back to http when I leave the order confirmation page? Otherwise, every time I click on a top nav tab I get the Security Information pop up box. ("This page contains both secure and nonsecure items..." etc.). It's probably not likely that a user will make a purchase and then continue navigating through the site solely with the top nav tabs, but IF they were, it would be pretty annoying for them to have to click the box every time they leave a page.

 

thanks much

~amylola