Help with SSL and HTTPS/HTTP

[Janovetz]

Hi folks-

 

I've had an osCommerce store open for a while but am now moving it to a new host. I'm revisitng the SSL stuff that confused me back then and trying to set it up in a less confusing manner.

 

Before, I had "store.mydomain.com" and "secure.mydomain.com". My host provided different directories for each hostname and I had them setup as:

 

store.mydomain.com/catalog -- Contained real copy of osCommerce

store.mydomain.com/store/catalog -- Link to real copy of osC

secure.mydomain.com/store -- Link to "store.mydomain.com"

 

I think this is more complicated than it needed to be. My config.php had HTTP configs setup for "store.mydomain.com" (including the cookie domain and server). The HTTPS configs were setup for "secure.mydomain.com".

 

It's my understanding that the SSL cert is installed for a particular host - so I thought all this jumble was necessary in order to avoid dedicating the cert to the store activities. (i.e., I didn't want to read email on "store.mydomain.com")

 

Can someone enlighten me on simpler ways to set this up? What is the "most common" way to do it?

 

Another reason behind me doing it differently, by the way, is that my new host provider uses cPanel which doesn't allow filesystem links. (at least as far as I can tell)

 

Cheers,

Jake

[Janovetz]

I suppose one possibility would be to put everything under SSL. Is this a bad choice? If I were to do this, what do I do with the "HTTP_SERVER" and "HTTP_COOKIE_DOMAIN" ?