Transferring to SSL after installation

[LisaT]

I installed and built my store without SSL. The link to SSL should have been set-up as part of the installation procedure, but since I did not do it at that time I'm not sure how to now make the changes to my store to ensure that it's secure

[Guest]

you will require an ssl certificate installed on the server, then set ssl enable in your includes/configure.php files to true, also set the paths properly.

[♥Vger]

Once you have an ssl cert installed, you need to edit the two configure.php files. Where it says enable_ssl you set it to 'true', and then you make your entries for https_server etc. and for https cookie domain - www.yourdomain.com or yourdomain.com, depending upon how the cert was issued.

 

If you have a company which uses a two-folder setup, one for httpdocs and another for httpsdocs then you'll have to duplicate the contents of your httpdocs folder in your httpsdocs folder.

 

Vger

[Guest]

Once you have an ssl cert installed, you need to edit the two configure.php files.  Where it says enable_ssl you set it to 'true', and then you make your entries for https_server etc. and for https cookie domain - www.yourdomain.com or yourdomain.com, depending upon how the cert was issued.

 

If you have a company which uses a two-folder setup, one for httpdocs and another for httpsdocs then you'll have to duplicate the contents of your httpdocs folder in your httpsdocs folder.

 

Vger

<{POST_SNAPBACK}>

 

I have installed with the ssl option. However, when I click on register i get a page not found 400 error. Do I need to install a security certificate? If so, where do i get one of them from??? I know this probably sounds a bit daft.

 

Thanks

[Guest]

yes, you need to purchase an ssl certificate.

[rpfray]

Hello boys and girls,

 

On this same theme, I have confirmed with my server that my SSL is installed correctly and it is registered to the www. prefix. I have attempted to edit my configure.php files to reflect this and everything I can find on here and other osCommerce resources leads me to believe I've got it right.

 

My catalog folder is in the root folder (domain.com/catalog). My server does not have separate folders for http and https as far as I can tell (but do I have to upload everything to another location as well?). And I'm having no problems connecting to my database.

 

But I keep getting the 404 errors for any https page I attempt to look at. Where do I go next?

 

I'd appreciate any help I can get. I've really tried to find the answers to this one without burdening the forum with simple problems like this, but I guess some of us are just meant to struggle....... :blush:

 

Cheers :thumbsup:

Richard

 

 

Just in case I'm making a schoolboy error (wouldn't be the first time), here is my includes/configure file - with details changed to protect the innocent....

 

-----

 

define('HTTP_SERVER', 'http://www.mydomain.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://www.mydomain.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.mydomain.com');

define('HTTPS_COOKIE_DOMAIN', 'www.mydomain.com');

define('HTTP_COOKIE_PATH', '/catalog/');

define('HTTPS_COOKIE_PATH', '/catalog/');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

 

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']));

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers

define('DB_SERVER_USERNAME', 'myusernamef');

define('DB_SERVER_PASSWORD', 'mypassword');

define('DB_DATABASE', 'mydb');

define('USE_PCONNECT', 'false'); // use persistent connections?

define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

?>

[♥Vger]

This is one of those cases where we can best help if you provide an actual web address, and we can then see what is actually happening.

 

Your configure.php file looks to be okay - but did your hosting company restart Apache (or Windows) after installing the cert?

 

Vger

[rpfray]

This is one of those cases where we can best help if you provide an actual web address, and we can then see what is actually happening.

 

Your configure.php file looks to be okay - but did your hosting company restart Apache (or Windows) after installing the cert?

 

Vger

<{POST_SNAPBACK}>

 

 

Oooh, I don't know.

 

The URL is http://www.shadesofarizona.com/catalog/index.php

 

... very much still under construction.

 

And before anyone says it, the client WANTED it that color, and that style. :blush:

[Guest]

that is not your own ssl certificate, it is your host ssl certificate, you need to contact them for the proper path to use for your ssl certificate.

[♥Vger]

Further to that, it does not have a www. prefix. This is a shared ssl, and as Mibble said you'll need ipowerweb to tell you the correct path to use.

 

Vger

[rpfray]

Further to that, it does not have a www. prefix.  This is a shared ssl, and as Mibble said you'll need ipowerweb to tell you the correct path to use.

 

Vger

<{POST_SNAPBACK}>

 

 

Thanks guys. I told me it was installed and that the prefix was www., but I obviously didn't make myself clear enough about it being the SSL we had purchased and, we thought, installed, rather than the shared one.... :blink:

 

Cheers :thumbsup:

Richard

[rpfray]

Just to round this off, iPower finally admitted they couldn't even install our SSL on the server our site was residing on, so we have had to move to a more capable server (still at iPower). Everything is now in place and, thankfully, it is all working without problems.

 

Thanks again guys! :thumbsup: :D :P

[Guest]

ahh, so did they charge you more, in the 'upgrade'?

[Guest]

Just a thought, but instead of maintaining two copies of the files one in httpdocs and one in httpsdocs. Could you not ask your host to set up a symlink, so httpsdocs looks in httpdocs for all its content?

 

Why would that not work?