SSL Lunarpages setup question

[hints]

We in the process of dividing 1 store into 2 or 3 stores.

(using osCommerce).

 

MAIN question we want to keep all the stores and other existing

add-on domains on one account, is HOW to DEAL with the SSL cert.,

used mainly while customers sign up.

 

Keep in mind LP only allows 1 dedicated IP per account.

Keep in mind LP runs SUphp which eliminated using LP shared SSL.

Keep in mind we do not wish to open additional accounts, just

keep the stores as add-on-domains to the main account.

 

At present we have SSL for store 1, what we are proposing dropping

this SSL, and is creating a sub-domain on the main account

IE: secure.mainaccountdomain.com.

and get a SSL cert. for it, and using it for our proposed

store1.com, store2.com, and store3.com.

 

Does anyone know of someone doing this successfully on

 

LunarPages using Oscommerce or for that matter any Hosting service

 

that is running SUphp ?

 

Appreciate any answers.

Thanks in advance.

 

Hints

 

PS> I have also posted this on Lunarpages forum.

I however thought osCommerce forum may give me more

general answer if this was possible with osCommerce.

 

it would

[♥Vger]

Don't know anything about SUphp, so can't comment on that.

 

If you want to run multiple stores off one domain and one ssl then the best way to do it is on a main domain (you already have the ssl cert), and put the various stores into folders (and not subdomains). That way the one ssl will work for all sites, without generating any errors.

 

Vger

[hints]

Don't know anything about SUphp, so can't comment on that.

 

If you want to run multiple stores off one domain and one ssl then the best way to do it is on a main domain (you already have the ssl cert), and put the various stores into folders (and not subdomains).  That way the one ssl will work for all sites, without generating any errors.

 

Vger

<{POST_SNAPBACK}>

 

Thanks for the reply Vger...

 

We want to run 2-3 stores on different domains, using one SSL since our

present host (LP) only allows one dedicated IP per account, though you

can multiple add-on-domains. This is why I was wondering if we create

a subdomain IE: www.secure.maindomain.com and when SSL is needed

then have it switch to that, and then switch back to the individual store.

At 1st I thought that would like elcheapo, but since the maindomain.com

name makes up part of store1 and store2, it does not look all that bad.

However, we would like to keep the products seperate that are in store1

from store2 mainly for SEO purposes.

 

Initidally I thought it would be simple, just do another add-on domain for

store2, and dedicate another database. But when it came to using the

ssl part, it bounced back to Store1, which is not that good.

 

On the other side, the payment/receipt can show any of the names,

since it all goes into one pocket, so to say.

 

Incidently the SSL Cert we have presently is on Store1, which is actually

an add-on-domain.

 

LP suggestion was opening another account (they do not offer bulk or

reseller accounts), which I am not pleased with for various reasons.

 

Regards the SUphp, is why I posted the same question in the LP forum

since this is something that is active on LP also.

No suggestion or reply as of yet.

Oh, LP is LunarPages as mentioned in my org post.

 

Any other thoughts or ideas ?

 

Hints

[♥Vger]

You only need one dedicated ip address and one domain for all of your sites if you run them off folders on the main domain.

 

I think that the way you're thinking of doing it is only going to make it unnecessarily complicated for you.

 

Even though on the same domain, because they are in seperate folders each site would be a stand alone site, with their own control panels etc.

 

Vger

[hints]

Thanks for your reply Vger

 

Even though on the same domain, because they are in seperate folders each site would be a stand alone site, with their own control panels etc.

 

I understand what your suggesting, since then the URL of the main domain would just be length by the folder that each store would be in.

 

But they want seperate domains for each major product group, which amounts to at present 2 different domains, with a 3rd being possible.

 

You only need one dedicated ip address and one domain for all of your sites if you run them off folders on the main domain.

 

What they and I would like to see is for example;

http://store1.com a customer logs in and then because of ssl the customer then sees the url;

https://secure.mainaccountdomain.com

 

and then when the customer continues to look at products, the URL again would read

http://store1.com ?

 

 

Open for your suggestions ?

For at present the only other way I see this will work, is that each domain,

store1.com and store2.com all would have their own ssl cert.

 

Wonder if anyone is doing this with osCommerce ??

 

Hints

[♥Vger]

What they and I would like to see is for example;

http://store1.com a customer logs in and then because of ssl the customer then sees the url;

https://secure.mainaccountdomain.com

 

If you have a full SSL installed then when the customer comes to, let's say Store 1, they should see http://yourdomain.com/store1, and when they go to Login they would see https://yourdomain.com/store1, and the same for store 2, 3, 4 - as many as you like, all on theone ssl cert, and all on the one ip address.

 

I've just done this for a customer, with a retail store in the root directory, and a wholesale store in a 'wholesale' folder. Works fine.

 

Vger

[hints]

Again thank you for the reply,

 

I believe where the situation I am dealing with is a little different is that they and I want to have the customers come in to http://store1.com or http://store2.com.

What I see your describing is working off 1 (one) domain name and using subdirectories/folders.

 

That is actually how we started with Store1, but then marketing wanted to use their business name/domain name, for which we got a SSL cert. Now they added the Store2 which works ok as far as the domain name and osCommerce goes, until it comes to the SSL cert.

 

As I see it we have two choices. One is open another account with the host provider, so that there can be a 2nd SSL cert, since the hosting company only allows one dedicated IP per account which the new SSL needs.

 

2nd choice (which is what I am after for a answer if someone has done this and if it works with "osCommerce") would be to get a new SSL cert for the main account using the URL https://secure.mainaccountdomain.com, and then Store1 and Store2 when it requires the SSL would switch to the https://secure.mainaccountdomain.com and when done switch back.

If osCommerce allows this switching between domain names ??

This is what I see as my main question.

 

I suspect I would have to put some PHP files within the secure folder for it to work. Exactly what I am unsure. I was hoping that someone had either tried this and it does not work, or that they had success. If they had success how is it done!

 

Hints

[Guest]

Can you get away with store1.domain.com and store2.domain.com? If so, then you can buy (but may have to look for it) a certificate for *.domain.com . I have done that before, not with osCommerce, but for another project.

 

-jared

[♥Vger]

Jared? If you can use a wildcard when purchasing an ssl on a domain I'd be interested to know about it. It would be very useful indeed!

 

Hints? I don't know if this would work, but you could try it out with the existing domain and ssl cert you have. Don't know how it works on your servers, but on the ones I use the file pathway for the full domain is /var/www/html, and for a subdomain it's /var/www/public_html. So, I suggest that you try setting up the store on a subdomain of that main domain, and using the subdomain pathway for http and https entries in the config files e.g. http://store1.maindomain.com, and https://store1.maindomain.com, but leave the cookie domain as www.yourdomain.com. The 'absolute' file pathway to your subdomain website would be (on my type of server) /var/www/public_html/ - and this combination may prevent you getting an error when switching to ssl parts of your website.

 

You can of course alias the subdomain to a folder address and this would give you the subdomain address you want while handling everything from a folder - so no ssl problems.

 

Vger

[Guest]

http://www.freessl.com/chainedssl/chainedssl_wildcard.html is one. :)

 

They can be very useful, as you don't have to buy certs for server1.domain.com, server2.domain.com, server3.domain.com, etc. You buy it for *.domain.com. As long as they're all on the same server (or you can "backup" and "restore" the certificate to different servers depending on what software you're running - - otherwise the CSR doesn't match the signed cert - - but that's a different discussion I suppose), you've no problem.

 

-jared

[hints]

jared & vger, thanks for your responses.

 

Wildcard SSL cert. is fairly expensive.

It would be less expensive just opening another account and getting another

SSL cert & dedicated IP, etc. for store2.

 

Vger,

Store1.com & Store2.com are actually in sub-directories/folders off the maindomain.com, but they have dedicated domains attached to them. For example, if a user would key in http://maindomain.com/store1 it would show store1 in the URL as being a subdomain, but once the customer clicks on anything, the URL changes to the actual dedicated domain to that sub-director/folder. However I have seen what your referring to where subdirectories off a maindomain.com works. Actually some of the large business's with wild card SSL cert do this quite often, though not necessarily with osCommerce.

 

Guess I should share, what I know does not work, at least in the setup we have, is; Store1.com which has SSL cert. and then Store2.com both as add-on-domains on the same mainaccount. When Store2.com goes into httpS:// or SSL mode it grabs httpS://Store1.com SSL cert, but does not come back to http://Store2.com.

Actually it makes a lot of sense why it does not.

At present I have left this setup with all the products in both stores, until I/we come up with a solution.

 

I suspect what I initially proposed to do either has not been done or does not work in view of the lack of replies of anyone sharing a maindomain.com SSL cert. I have also not received any positive news on LP forum (our present host).

 

Jared, thanks for the URL on the wildard SSL cert.

 

Hints

[hints]

This subject keeps bugging me, so I took a different approach and searched on shared SSL, cert. Which is essentially what we are trying to do, except as in most cases people are talking about using Host shared SSL cert. Where in this case we are talking about using our main account SSL cert in the form of secure.mainaccount.com

 

Vger, I saw you were involved in this exchange.

What you guys/gals think, would this work?

 

http://www.oscommerce.com/forums/index.php?showtopic=124724&hl=

 

http://store1.com

http://store2.com

 

https://secure.mainaccount.com/store1

https://secure.mainaccount.com/store2

 

My only concern now how LP (Lunarpages) SUphp would react.

 

Any thoughts, ideas, input, etc. :)

 

Hints