Shared SSL Issue W/ Cookies

[olajideolaolorun]

O.K. I have two stores that I am working on right now... both use OSC....

 

I have set the Shared SSL and everything works fine except when I go to

 

http://www.agapejewelry.com/store/

 

or

 

http://store.baloinc.com

 

and I click the My Account or Checkout, it transfer me to the Secure Site of the page but upon loading i get a cookie error that my browser does not support cookies which it does.

 

I don't know if the error is from the configure.php with the cookie define, but could you help me look it over.

 

Most of the comments are by me....

 

/catalog/includes/configure.php of...

 

This is the CONFIGURE.PHP for STORE.BALOINC.COM:

 

<?php
/*
 osCommerce, Open Source E-Commerce Solutions
 http://www.oscommerce.com

 Copyright (c) 2003 osCommerce

 Released under the GNU General Public License
*/

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
 define('HTTP_SERVER', 'http://store.baloinc.com');  
 define('HTTPS_SERVER', 'https://69.9.164.194/~baloinc/store'); 
 define('ENABLE_SSL', 'true'); 
 define('ENABLE_SSL_CATALOG', 'true'); //got from the osc forum tring to make it work
 define('HTTP_COOKIE_DOMAIN', 'http://store.baloinc.com'); //without http it is the same
 define('HTTPS_COOKIE_DOMAIN', 'https://69.9.164.194/~baloinc/store/'); //without https it is the same
 define('HTTP_COOKIE_PATH', '/');
 define('HTTPS_COOKIE_PATH', '/');
 define('DIR_WS_HTTP_CATALOG', '/');
 define('DIR_WS_HTTPS_CATALOG', '/');
 define('DIR_WS_IMAGES', 'images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
 define('DIR_FS_CATALOG', '/home/baloinc/public_html/store/');
 define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
 define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

// define our database connection
 define('DB_SERVER', 'localhost'); 
 define('DB_SERVER_USERNAME', '****');
 define('DB_SERVER_PASSWORD', '****');
 define('DB_DATABASE', '****');
 define('USE_PCONNECT', 'false'); 
 define('STORE_SESSIONS', 'mysql'); 
?>

 

This is the CONFIGURE.PHP for HTTP://WWW.AGAPEJEWELRY.COM/STORE/:

 

<?php
/*
 osCommerce, Open Source E-Commerce Solutions
 http://www.oscommerce.com

 Copyright (c) 2003 osCommerce

 Released under the GNU General Public License
*/

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
 define('HTTP_SERVER', 'http://www.agapejewelry.com'); // eg, http://localhost  
 define('HTTPS_SERVER', 'https://st05.startlogic.com/~agapejew'); // eg, https://localhost 
 define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?
 define('ENABLE_SSL_CATALOG', 'true'); 
 define('HTTP_COOKIE_DOMAIN', '.agapejewelry.com');
 define('HTTPS_COOKIE_DOMAIN', '.agapejewelry.com');
 define('HTTP_COOKIE_PATH', '/store/');
 define('HTTPS_COOKIE_PATH', '/store/');
 define('DIR_WS_HTTP_CATALOG', '/store/');
 define('DIR_WS_HTTPS_CATALOG', '/store/');
 define('DIR_WS_IMAGES', 'images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
 define('DIR_FS_CATALOG', '/home/baloinc/public_html/store/');
 define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
 define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

// define our database connection
 define('DB_SERVER', 'localhost'); // eg, localhost - should not be NULL for productive servers
 define('DB_SERVER_USERNAME', '****');
 define('DB_SERVER_PASSWORD', '****');
 define('DB_DATABASE', '****');
 define('USE_PCONNECT', 'false'); // use persistent connections?
 define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'
?>

[Guest]

take the http:// out of the domain setting, also does your host have a different alias setup for you to access the ssl?

[stevel]

You should also change your database password, as you have now revealed it to the world.

[olajideolaolorun]

Well Steve, I tried to edit it but I was too late as it stopped me... but it doen't matter because I will be changing it if I get everything to work fine....

 

Could an Admin edit it for me, please....

 

Also, the host didn't set up another alias for me. The SSL links to the HTTP one I guess...

 

 

Taking the http:// won't do any good... I get errors like http://domain.com/store.blah.com

[stevel]

The xxx_COOKIE_DOMAIN defines are NOT URLs. They should be domains only - whatever follows // and precedes the next /. In the case of HTTPS_COOKIE_DOMAIN, if you are using a shared SSL certificate, it will be the domain part (all of it) of the HTTPS URL and must match that domain. No leading dot and certainly no "https".

[olajideolaolorun]

Do you mean soemthing like this:

 

HTTP: agapejewelry.com <- http://www.agapejewelry.com/store/

HTTP: store.baloinc.com <- http://store.baloinc.com/

 

HTTPS: st05.startlogic.com/~agapejew

HTTPS: 69.9.164.194/~baloinc/store

 

Do you mean they should be those....

 

If you do, I tried it and I still get the cookie error....

[stevel]

I mean that the respective COOKIE defines should be:

 

define('HTTP_COOKIE_DOMAIN','agapejewelry.com');

define('HTTPS_COOKIE_DOMAIN','startlogic.com');

 

define('HTTP_COOKIE_DOMAIN','baloinc.com');

define('HTTPS_COOKIE_DOMAIN','69.9.164.194');

 

That said, the HTTPS side will not be able to read the cookie set on the HTTP side because the domains are different.

[Guest]

I use Startlogic also and if I set my cache to True I get agape jewerly in my categories. So then I have to turn of cache

. Just curious as to why to bleed over?? I would like to enable the cache for surfing speed as most of my clients are 28.8 dial up

[stevel]

Your two stores are sharing a cache folder. Configure them in admin to use separate folders.