SSL - Help With Secure Checkout

[macmansit]

Hello everyone!

 

I have searched and searched, and see posts with similar problems, no REAL answers though.

 

I have an OsC shop, OsC was pre-installed through my hosting company (websitesource.net) - So it isn't easy for me to just install again, as I never saw the OsC installer to begin with, and also since I have already edited a lot of the code.

 

I have shared ssl through my provider and wish to know how to get OsC to checkout securely with it. In theory, I really SHOULDN'T have to re-install. It appears as though one would be able to simply change these settings in catalog/includes/configure.php - only when i plug in my https server info and change secure chechout to true, it still checks out through http...

 

Is there something I am missing? Do I need to perhaps change something in the DB through MySQL Admin? Any help would be greatly appreciated!

 

Thank you,

Brian

 

FYI: Here's an excerpt of the code that SHOULD do the magic (I'm guessing) in my configure.php:

 

define('HTTP_SERVER', 'http://www.myshop.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://myshop.websitesource.net'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

[wilson123]

Hello, Im just sorting the same probs at the mo, there are further options below the ENABLE SSL that need to be changed as well.

 

Maybe changing those as well and everything "should" work :)

[macmansit]

Could you give me an example of what else?

 

I have this:

define('HTTPS_COOKIE_DOMAIN', 'myshop.websitesource.net');

 

but other then that everything else looks to be just general paths, except for MAYBE:

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

 

which I have edited to something like '/catalog134234234/' just to see if it did anything, which ofcourse it didnt...

 

Is there something I am missing?

[AlanR]

Look for a second copy of the catalog configure.php file in the catalog/incudes/local directory. Rename it.

[macmansit]

Thank you Alan!!!!

 

This REALLY should be posted in the knowledge base...

 

Every old thread I read mentions two configure.php's, one in admin/includes, and another in catalog/includes, but I had no idea there was another on in local!

 

To anyone with similar problems, I simply renamed the configure.php in catalog/includes/local and made a copy and made the appropriate definitions to my https server, then saved it as configure.php

 

Then I the reverted the configure.php in the catalog/includes folder back to the default (blank) one....

 

AND VIOLA!!! HTTPS when you checkout!

 

Thanks again Alan!

[AlanR]

It's an extra that creeps in on some installs. I never figured out why some have it and some don't. It's a developer tool, if you check the readme file in that folder you'll see.

[Luke99]

Hey guys,

 

I have just changed the SSL in my -2- configs files to "true" and when I tried to log in I got a 404 error!!

I don't have a config file in the /local folder....

Any clues?

:huh:

Thanks

[AlanR]

Any clues?

:huh:

You may have a server which uses a separate folder for secure items. Look in the directory structure, you'll see a folder named https_docs or something similar.

[Luke99]

Found the solution here:

http://www.oscommerce.com/forums/index.php?sho...ndpost&p=344709

 

Thanks Iain!

:D

Cheers!

[Shuey]

I'm about to pull my hair out. I am having the most difficult time getting SSL to work.

 

Here is my /includes/configure.php file:

 

define('HTTP_SERVER', 'http://inveniotechnology.com');

define('HTTPS_SERVER', 'https://server6.totalchoicehosting.com/~shulmdj');

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'inveniotechnology.com');

define('HTTPS_COOKIE_DOMAIN', 'server6.totalchoicehosting.com/~shulmdj');

define('HTTP_COOKIE_PATH', '/store');

define('HTTPS_COOKIE_PATH', '/store');

define('DIR_WS_HTTP_CATALOG', '/store/');

define('DIR_WS_HTTPS_CATALOG', '/store/');

 

I have also copied this configure.php file to

/admin/includes/

/admin/includes/local

/includes/local

 

If anyone can help me out I would be so thankful!!!

 

 

Thanks,

Dale

[AlanR]

Try:

 

define('HTTP_COOKIE_PATH', '/store/');

define('HTTPS_COOKIE_PATH', '/store/');

 

Remove the configure.php files from the local directory, you'll confuse yourself.

[Shuey]

thanks alan for the reply. i put the install folder back in and re-ran the install checking the ssl box

 

here is the configure.php file it made:

 

define('HTTP_SERVER', 'http://inveniotechnology.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://server6.totalchoicehosting.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.inveniotechnology.com');

define('HTTPS_COOKIE_DOMAIN', 'server6.totalchoicehosting.com');

define('HTTP_COOKIE_PATH', '/store/');

define('HTTPS_COOKIE_PATH', '/~shulmdj/store/');

define('DIR_WS_HTTP_CATALOG', '/store/');

define('DIR_WS_HTTPS_CATALOG', '/~shulmdj/store/');

 

 

it seems to be working at first glance, but i can't add anything to the cart? and when you're logged in it says "guest, would you like to log yourself in"

 

anyone experience this? or any solutions?

[AlanR]

You have an inconsistency between

 

define('HTTP_SERVER', 'http://inveniotechnology.com');

 

and

 

define('HTTP_COOKIE_DOMAIN', 'www.inveniotechnology.com');

 

You have www in one place and not the other. I get the cookie usage page.

 

I'd change:

 

define('HTTP_SERVER', 'http://inveniotechnology.com');

 

to:

 

define('HTTP_SERVER', 'http://www.inveniotechnology.com');

[Shuey]

thanks alan, i made that change. it's always great to have another set of eyes, especially when yours are about to fall out from staring at the computer screen for days straight on end.

 

i am able to login and add items to the cart (both logged in and not logged in, couldn't add items to cart before in either situatin). however it is acting very strange

 

1) when i am not logged in and add items to the cart and then attempt to login the items in the cart disappear and there are items that were previously in the cart (from yesterday)

 

2) when i go to the store's homepage (while i am logged in) it shows the guest welcome screen

 

any ideas?

 

thx,

dale