Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Need help with SSL


Fredrik.r

Recommended Posts

When activating SSL osC automatically use https in some links on every page in my shop. Explorer does not seem to like http and https links mixed in one page and therefor doesnt show the secure lock. How do I get rid of all those alert warnings? My shop is secure but since not ALL links use https Explorer doesnt think of my page as secured.. Using SSL everywhere in my shop will make it slower.. Is there a way to use SSL only during checkout, when the customer is about to fill in the credit card number?

 

How did all of you osc-users solve this SSL issue with Explorer?

Link to comment
Share on other sites

When activating SSL osC automatically use https in some links on every page in my shop. Explorer does not seem to like http and https links mixed in one page and therefor doesnt show the secure lock. How do I get rid of all those alert warnings? My shop is secure but since not ALL links use https Explorer doesnt think of my page as secured.. Using SSL everywhere in my shop will make it slower.. Is there a way to use SSL only during checkout, when the customer is about to fill in the credit card number?

 

How did all of you osc-users solve this SSL issue with Explorer?

 

 

I don't think it's an explorer problem

 

You will find that on the pages that give you an error you have in there a reference with a path that begins http: - hence unsecure - all the ssl cert is doing is alerting the browser that there is a reference on the page that is not secured and thios will happen regardless of browser

 

What you need to do is go to each page with the error - it may even be something in your footer for instance and make sure no hard coded references to http: exist AND also you are not referencing images or pages or anything else - e.g logos - from somebody elses server - sometimes people will do this in good faith suct as a payment gateways logo hosted by them.

 

Finally make sure your configure files have the correct paths for the https: which should be the domain name and not the url i.e the path for https: should not have www in it.

 

hth

 

Charles

A kite flies highest AGAINST the wind !

 

"Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, a lover in one hand, martini in the other, body thoroughly used up, totally worn out and screaming ~ WOO HOO!! What a ride!"

Link to comment
Share on other sites

Thanks. Ok, is it better to use https in all paths rather than mixing relative and https paths? I suppose using just SSL will slow down my site. The same thing when using only relative paths with STS according to the STS readme file.

Link to comment
Share on other sites

Thanks. Ok, is it better to use https in all paths rather than mixing relative and https paths? I suppose using just SSL will slow down my site. The same thing when using only relative paths with STS according to the STS readme file.

 

 

No don't use https rather than relative paths

 

osC will point to the right path automatically - just make sure you are not referencing "anything" at all that resides on a path that is not covered by the cert.

A kite flies highest AGAINST the wind !

 

"Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, a lover in one hand, martini in the other, body thoroughly used up, totally worn out and screaming ~ WOO HOO!! What a ride!"

Link to comment
Share on other sites

I think im quite close now.. But, why does not, for example, the information box get https paths in an ssl page? osC should give ALL paths on ssl pages https paths..

 

 

Don't know is the short answer - but why would it put such info into ssl ? SSL is meant to protect info \ data such as personal \ bank details - why protect privacy statements etc ? :huh:

 

Charles

A kite flies highest AGAINST the wind !

 

"Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, a lover in one hand, martini in the other, body thoroughly used up, totally worn out and screaming ~ WOO HOO!! What a ride!"

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...