shared ssl setup

[fatbloke]

how do i set oscomm to use my hosts shared ssl facility ?

[♥Vger]

The most important thing you need to know is - What is the pathway to your website when using the shared ssl cert? It can be something like:

http://servername.host_company_name.com/yourdomain.com

but you will have to check with your hosting company to find out exactly what it should be.

 

Then you need to set ssl to 'true' in your configure.php files, and where it asks for an https domain you input the shared ssl pathway. For https cookie domain, try leaving that blank - because it's not your domain.

 

Vger

[TCwho]

The most important thing you need to know is - What is the pathway to your website when using the shared ssl cert?  It can be something like:

http://servername.host_company_name.com/yourdomain.com

but you will have to check with your hosting company to find out exactly what it should be.

 

Then you need to set ssl to 'true' in your configure.php files, and where it asks for an https domain you input the shared ssl pathway.  For https cookie domain, try leaving that blank - because it's not your domain.

 

Vger

<{POST_SNAPBACK}>

 

Hi Vger

 

Im using shared ssl

this is my portion from catalog/includes/configure.php

define('HTTP_SERVER', 'http://www.thelighthousebooks.com'); // eg, http://localhost - should not be empty for productive servers
 define('HTTPS_SERVER', 'https://ssl.perfora.net'); // eg, https://localhost - should not be empty for productive servers
 define('ENABLE_SSL', true); // secure webserver for checkout procedure?
 define('HTTP_COOKIE_DOMAIN', 'www.thelighthousebooks.com');
 define('HTTPS_COOKIE_DOMAIN', 'https://ssl.perfora.net/thelighthousebooks.com');
 define('HTTP_COOKIE_PATH', '/catalog/');
 define('HTTPS_COOKIE_PATH', '/catalog/');
 define('DIR_WS_HTTP_CATALOG', '/catalog/');
 define('DIR_WS_HTTPS_CATALOG', '/thelighthousebooks.com/catalog/');
 define('DIR_WS_IMAGES', 'images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

I havent seen a problem at ALL. But do you recommend any changes?

 

...since I noticed your comments about the cookie thing

[♥Vger]

I would make the following changes (it's the way I set things up for shared ssl.

 

define('HTTPS_SERVER', 'https://ssl.perfora.net/thelighthousebooks.com'

 

and then set this to

 

define('DIR_WS_HTTPS_CATALOG', '/catalog/'); //now matches with your other 'catalog' settings

 

and I would try removing the https cookie domain, and if it causes problems put it back in

 

define('HTTPS_COOKIE_DOMAIN', '');

 

in any event you should not be using the 'https://' at the start

 

Vger

[TCwho]

in any event you should not be using the 'https://' at the start

 

why do you say that?

 

and I will try your recommendations....shortly ;)

[TCwho]

I would make the following changes (it's the way I set things up for shared ssl.

 

define('HTTPS_SERVER', 'https://ssl.perfora.net/thelighthousebooks.com'

 

and then set this to

 

define('DIR_WS_HTTPS_CATALOG', '/catalog/');  //now matches with your other 'catalog' settings

 

and I would try removing the https cookie domain, and if it causes problems put it back in

 

define('HTTPS_COOKIE_DOMAIN', '');

 

in any event you should not be using the 'https://' at the start

 

Vger

<{POST_SNAPBACK}>

 

 

Everything seems to be working Great.

 

now as I following your advice...I couldnt help but wonder why you wanted to define the https cookie domain '' ?

 

and I also assume your reasoning for adding thelighthousebooks.com to the secure server part....was because I have a shared server..and I should point it specifically to this site right? for security measures and to avoid problems incase someone else happens to have a osc site? or am I wrong :blush:

 

Thanks ... had been meaning to sort this out...

[SunnyWales]

All this is really useful - thanks!

 

However, I wanted to check something before I did any work on installing the ssl. I had a really bad weekend with the store and want to check before going off in the wrong direction again.

 

Do I need to copy the whole of my /catalog directory to my shared ssl folder?

 

I'd be grateful for any help.

 

Wendy

[dentonio69]

I also have a question regarding Shared SSL,

 

since i'm on a free host I'm not sure whether they will answer my email, SO:

 

I notice that I have a SSL folder with a /certs and /private subfolders. Is this my shared SSL address? (ie. can I enter this into configure.php?)

 

And how do I incorporate my self-generated Certificate (through Cpanel -> SSL Manager) into this?

 

Thanks

 

(edit: btw I'm using 000k.com, If anyone knows their Shared SSL address that would be very helpful)

[♥Vger]

I notice that I have a SSL folder with a /certs and /private subfolders. Is this my shared SSL address? (ie. can I enter this into configure.php?)

 

It sounds as though the 'certs' folder is for use when and if you have a cert for your site. Private subfolders are just there for any files you don't want other people to see

 

And how do I incorporate my self-generated Certificate (through Cpanel -> SSL Manager) into this?

 

This is not a Certificate. All that you are generating is a CSR (Certificate Signing Request), which you need if you buy a certificate

 

Vger

[dentonio69]

I notice that I have a SSL folder with a /certs and /private subfolders. Is this my shared SSL address? (ie. can I enter this into configure.php?)

 

It sounds as though the 'certs' folder is for use when and if you have a cert for your site.  Private subfolders are just there for any files you don't want other people to see

 

And how do I incorporate my self-generated Certificate (through Cpanel -> SSL Manager) into this?

 

This is not a Certificate.  All that you are generating is a CSR (Certificate Signing Request), which you need if you buy a certificate

 

Vger

<{POST_SNAPBACK}>

 

bummer...so basically there's no way to find the shared SSL address in CPanel?

[♥Vger]

You'll have to ask your hosting company - or you could see if it's listed in an FAQ's page on their website.

 

Vger