Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

SSL - again


MbT

Recommended Posts

I've spent a long time reviewing the forums and can't figure out the solution to enable SSL.

 

I have a full SSL certificate and have a httpdoc and httpsdoc directory.

 

I've installed the catalog under the httpdoc directory and in the setup told it I have SSL and given the paths.

 

Everything seems to work except that 'check out' cart goes to my SSL site, but there is nothing there, so you get an error.

 

What exactly am I doing wrong?

Link to comment
Share on other sites

If you have a full SSL certificate e.g. www.yourdomain.com then you shouldn't need to have any files in an httpsdocs folder (I've worked with Windows, Linux and Unix servers and haven't come across this before - except with shared ssl).

 

What does your hosting company say about this? Have they confirmed you need an httpsdocs folder? I'd be interested to know the answer on that, as a few people have posted saying they have such a folder.

 

Vger

Link to comment
Share on other sites

If you have a full SSL certificate e.g. www.yourdomain.com then you shouldn't need to have any files in an httpsdocs folder (I've worked with Windows, Linux and Unix servers and haven't come across this before - except with shared ssl).

 

What does your hosting company say about this?  Have they confirmed you need an httpsdocs folder?  I'd be interested to know the answer on that, as a few people have posted saying they have such a folder.

 

Vger

Hello Vger, I do have a full certificate e.g. www.mydomain.com. I'm running on Linux with Apache. I've got a website http and number of secure web apps (intranet, extranet) https currently running. The server I'm hosted from is shared by others at my ISP. So I'm just a virtual host. Well actually two virtual hosts. One for https and one for http. I can post my apache config if that would help. My ISP claims this is a best practice in secured web hosting.

Link to comment
Share on other sites

Agh, now I see what's happening! Light comes on in head!! Your site is name based on a shared server. If you're running full ssl cert then it should be ip based - this cuts you off from the rest of the sites on the server using a generic ip address for all. Then, no need for httpsdocs folders!

 

My ISP claims this is a best practice in secured web hosting

 

MMmmmmm?????? Find out how much extra they charge to make your site ip based. If it's more than $2-3 a month - find another host. If they don't do ip based sites - find another host! There are plenty of good hosts about, so there's no need to put up with ones that offer less.

 

Vger

 

There are also some good Virtual Dedicated Server deals (VDS or VPS) about. This is a box attached to a shared server, each box providing a mini-server, which others on the same server can't access. It gives you the same level of access as if you had your own dedicated server, but at a fraction of the rpice - and it is managed for you. By default they come with their own ip address, part of the package.

Link to comment
Share on other sites

I do have an IP. The hosting company automatically setup a httpsdocs. Anything I upload to the httpsdoc folder appears with the lock in the bottom.

 

How should the SSL be setup? How would you distinguish between the 'secured' site and the 'regular' site?

Link to comment
Share on other sites

I've uploaded the files also to the httpsdocs folder and tried to setup the shop there. However the problem I had was that the links to the categories all wanted to go to my 'unsecured' site.

Link to comment
Share on other sites

osCommerce distinguishes between those parts of the shopping cart that should be behind the ssl. If you have your own ip address (unique to your website) and a full ssl I honestly can't see why you have to have an httpsdocs folder. If you do have a full ssl cert and your own ip address go back to your hosting company and ask them why you need to have an httpsdocs folder. I'd be interested to hear what they say.

 

Vger

I do have an IP.  The hosting company automatically setup a httpsdocs.  Anything I upload to the httpsdoc folder appears with the lock in the bottom.

 

How should the SSL be setup?  How would you distinguish between the 'secured' site and the 'regular' site?

Link to comment
Share on other sites

GOT IT!

 

My hosting company (www.pjmco.ca) has OsCommerce as an optional program to install. I installed it to my https folder (httpsdocs). The only problem I had is that my certificate was for www.chiro.cc and all the images were going to chiro.cc, thus my certificate wasn't working.

 

I went into /admin/includes/configure.php and changed them and also catalog/includes/configure.php

 

now it works great.

 

Good luck all!

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...