Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

SSL won't work!


zacarias2006

Recommended Posts

Sigh... where to begin....ok well i've Been reading the threads on the forums for about 2 hours and nothing seems to work.

 

problem: I've installed osCommerce. I managed to get everything working (with sample database). Then when I tried to make the SSL work. It starts perfectly but the second when I click on, login.php, create_account.php or checkout.php. I get a 'this page cannot be displayed' message from IE. Then I noticed that whenever it makes a request to HTTPS:// it never finds the page. The moment I disable SSL everything works perfect again. By now I've checked every possible configuration(httpd.conf, ssl.conf, php.ini, 2 configure.php) files 10 times already. All my settings seem to be right! but I still can make it display anything from https. I dont use any outside servers. I made my own certificate based on the info on this site :http://www.suteki.nu/howto.html#reqpak But i cant get it to work. I tried to test and see if it worked: it seems is that it works on the server ( with lynx and curl) but it doesnt seem to work from any other pc other than the server. How can I test the 'https' part effectively to see if the problem lies there?

 

Any information would be useful thnx.

Link to comment
Share on other sites

Sigh... where to begin....ok well i've Been reading the threads on the forums for about 2 hours and nothing seems to work.

 

problem: I've installed osCommerce. I managed to get everything working (with sample database). Then when I tried to make the SSL work. It starts perfectly but the second when I click on, login.php,  create_account.php or checkout.php. I get a 'this page cannot be displayed' message from IE. Then I noticed that whenever it makes a request to HTTPS:// it never finds the page. The moment I disable SSL everything works perfect again. By now I've checked every possible configuration(httpd.conf, ssl.conf, php.ini, 2 configure.php) files 10 times already. All my settings seem to be right! but I still can make it display anything from https. I dont use any outside servers. I made my own certificate based on the info on this site :http://www.suteki.nu/howto.html#reqpak But i cant get it to work. I tried to test and see if it worked: it seems is that it works on the server ( with lynx and curl) but it doesnt seem to work from any other pc other than the server. How can I test the 'https' part effectively to see if the problem lies there?

 

Any information would be useful thnx.

 

Hello,

 

Check and see if you can access any page on your site through SSL. If necessary just make up a test page or something outside of OSC. Last week we had an issue just as you described and it turned out that the host had a issue with the SSL certificate. They corrected that and all was well again.

 

Be well,

 

Tina

If you're not having fun you're not doing it right

 

Teach a person to fish rather than give them a loaf of bread or however that saying goes.

Link to comment
Share on other sites

If you are using a self-generated ssl cert then you are wasting your time. If this website is a live site to be used by customers then every customer is going to get a 'This Certificate is not trusted' warning every time they go to an https page. That will automatically drive people away from the site.

 

A self-generated cert shows that it is 'issued to' and 'issued by' your domain. Unless it is 'issued by' a trusted provider of ssl certs listed in the Trusted Root Certificate Store on the users browser then this error message will appear on every https page. When a full ssl cert costs less than $50 it's just not worth using a self-generated cert.

 

Vger

Link to comment
Share on other sites

Tina, how do I make a test page? If you mean put a put a normal webpage in the secure folder and test it? well that didnt work either.

 

VillageWeb, the link did not help me. but thnx for the help. I really appreciate it!

 

And Vger, sigh.... why do you even bother wasting my time and other poster's time by posting something that doesn't help me with nothing. Don't you think I would know that? or I wouldn't realise that by only reading around forums?Do you think is smart to waste 50 dollars on a certificate and I can't get it to work on my server?Im testing everything out first then I invest in them. now your post I call a waste of time<_< .

 

Ok lemme explain the situation. I have RH linux 9 and apache 2.049 that I installed about 10 months ago on my server. Now I want to install a storefront on one of my sites. So i found about osCommerce. I immediately installed and tweaked everything went perfect so i decided it had to be secure and give costumers confidence on the site that we handle with care with sensitive information. So when I made my own certificate to test if it really worked (and how). but when I tried to do ./apachctl startssl then I realised that I didnt configure apache with SSL. So I reconfigured(I did this by kinda reinstalling apache) So now it seemed to do everything the tutorial said it would do. But i cant get connection to https. I checked port 443 and its listening on that port. So that works. I dont really know.

 

Help me!

Link to comment
Share on other sites

Tina, how do I make a test page? If you mean put a put a normal webpage in the secure folder and test it? well that didnt work either.

 

VillageWeb, the link did not help me. but thnx for the help. I really appreciate it!

 

hello,

 

The reason for trying a test page outside of OSC, is then you are taking OSC out of the picture and only testing your SSL. The fact that test page did not work tells me the issue is with the SSL setup. Unfortunately on that level I'm not qualified to help, but at least you know where to concentrate your efforts.

 

Be well,

 

Tina

If you're not having fun you're not doing it right

 

Teach a person to fish rather than give them a loaf of bread or however that saying goes.

Link to comment
Share on other sites

There is a possibility that your osc configuration for ssl is pooched (LOL). I had a problem were I got the "This page cannot be displayed" too. For my situation I finally figured out I had the s capitalized in address

define('DIR_WS_HTTPS_CATALOG', '/ink.omegaxcron.com/Shop/');

when it should have been

define('DIR_WS_HTTPS_CATALOG', '/ink.omegaxcron.com/shop/');

Linux is picky about case sensitive text.

 

So you might wanna check your config file to make sure the HTTPS link is correctly typed out.

 

Hope this helps. :D

 

NOTE: HTTP and HTTPS are seperated in the config file so one can be correct while the other different.

Link to comment
Share on other sites

Tina, yeah its not OsC related. But what annoys me the most is that I tried 3 commands in linux. They all showed that SSL is working perfectly. BUT i cannot find any tools for me to try from windows to the server to see whether if is a connection problem or not. but these are the commands i tried

 

nmap -sT -O localhost (to see which ports its listening to. it showed the server listening op port 443)

 

openssl s_client -connect localhost:443 -state -debug ( it gave me a bunch of code with analysis. if i changed the port of course it wouldnt work!)

 

curl https://localhost/ (this one would just give me the HTML code of the page in secure mode. This one worked perfect too)

 

Keitaro, I havent touched any of those settings so i couldnt be that. But thnx for the effort. I will take a look at them. It can never do any harm.

 

Im going to keep testing and veryfing If I find something out I will post the result on the forum.

 

Once again thnx for the help.

Link to comment
Share on other sites

Tina, yeah its not OsC related. But what annoys me the most is that I tried 3 commands in linux. They all showed that SSL is working perfectly. BUT i cannot find any tools for me to try from windows to the server to see whether if is a connection problem or not. but these are the commands i tried

 

nmap -sT -O localhost (to see which ports its listening to. it showed the server listening op port 443)

 

openssl s_client -connect localhost:443 -state -debug ( it gave me a bunch of code with analysis. if i changed the port of course it wouldnt work!)

 

curl https://localhost/ (this one would just give me the HTML code of the page in secure mode. This one worked perfect too)

 

Keitaro, I havent touched any of those settings so i couldnt be that. But thnx for the effort. I will take a look at them. It can never do any harm.

 

Im going to keep testing and veryfing If I find something out I will post the result on the forum.

 

Once again thnx for the help.

 

Hi,

 

You're always welcome and sorry you are having so much trouble. I have experience working on Windows servers but for Linux I leave that up to my web host, so all those commands look a little greek LOL. Sending you a little positive energy in hopes that you will soon get it all worked out.

 

Be well,

 

Tina

If you're not having fun you're not doing it right

 

Teach a person to fish rather than give them a loaf of bread or however that saying goes.

Link to comment
Share on other sites

!!!!! RESOLVED!!!!!!!!

 

As I thought but I wasn't smart enough to go check it because i believed it wasn't turn on! THAT FIREWALL cost me i don't know how many days of pain and sleepless nights. The server had its firewall on. I was triggered to check on this after i read this post: http://forums.devside.net/viewtopic.php?p=2994. Man did that thread safe me! And I don't have a clue how to work that firewall from the command line. So i read a bit from the man pages and I remember the word 'flush' from the thread so I did that and it WORKED!. But Im gonna find out how to work the firewall after i get some needed rest!!

 

Thnx for the help and the support!! I love this forum. A lot of supportive people on it!

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...