Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

security certificate


millhouse

Recommended Posts

Posted

Hi

 

I've just had installed a security cert from geotrust. Problem is that I get the 'this page contains both secure and non-secure items' warning.

 

I'm led to believe this is because there is a link on the page that is not https.

 

Could this be the problem and if so how do I find the link and alter it?

 

thanks

Posted

this is probably an image - can you copy it to the secure folder on your webhost?

Regards

 

Mark A Reynolds

Posted

this is probably an image - can you copy it to the secure folder on your webhost?

Regards

 

Mark A Reynolds

Posted

this is probably an image - can you copy it to the secure folder on your webhost?

Regards

 

Mark A Reynolds

Posted

thanks for your reply

 

not sure I follow what you mean though

 

Where will I find the secure folder? Can you explain in a little more detail for me please?

 

many thanks

Posted

trusting you have ftp access you an copy the image that is the culprit to the ssl folder on your web hosting

- right click all the images that are loaded and see which one startswith http:// as opposed to https://

Regards

 

Mark A Reynolds

Posted
trusting you have ftp access you an copy the image that is the culprit to the ssl folder on your web hosting

- right click all the images that are loaded and see which one startswith http:// as opposed to https://

 

 

thanks for that, thought it sounded a bit simple though. Turns out I can't access the folder through ftp, it is called ssladmin i assume that is the one but it won let me see whats in it or add to it.

 

Is there another way? I have located a few links on the page that are http and not https

 

thanks again

Posted

Firstly, if you have links to other sites located on any of your pages, it's best for the image part of the link to actually be located in your images folder. That way the image (which is usually the culprit) can switch between ssl and nonssl as required. Having an http web address on your website shouldn't cause the error - only a hardcoded image to an http address.

 

Vger

Posted

thanks that seems useful.

 

However would it not be the case that if when the warning appeared i clicked no to displaying the items, would any image that was responsible for the warninf not be shown? this isn't the case. There seems to be no difference to page if i click yes or no.

 

If thats not the case could the culprit be a flash image?

 

thanks

Posted
If thats not the case could the culprit be a flash image?

 

Most definitely. Flash images usually contain two http references, one to the main flash site and the other to the download link. Make these https and see how you go.

 

Vger

Posted

I have just found that when an SSL fails to envoke can be also be due to setting at installation phase (When using Fansastico installer, not sure of other install procedures) that the host address for SSL defaults to mydomainname (not www.mydomain)

 

If you insert www.mydomainname as the host address you wont experience the urls dropping the www.

 

We learned the hard way just now, and the SSL cert is not activating when required due to the url change (dropping www.) which was not noticed until heaps of modification done to store. Should have had the SSL in place initially or a least configured for future installation.

 

(SSL certificates get installed against a specific host address www.mydomain and mydomain are different host addresses and critical in this situation)

 

If anyone knows a work around to adjust the host addressing settings it would be most appreciated.

 

Thanks

Posted

Hi

 

Can anyone explain to me how to make images/flash images secure?

 

My cert is installed but there are some unsecure images on the page so i get a 'this page contains both secure and non-secure items' warning

 

thanks

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...