SSL not working

[parma]

Hey there,

 

I have now purchased a certificate and dedicated ip for my site.

 

http://gloveclub.co.uk

https://gloveclub.co.uk

 

The configuration file is as follows;

 

<?php

/*

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://gloveclub.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://gloveclub.co.uk'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'gloveclub.co.uk');

define('HTTPS_COOKIE_DOMAIN', 'gloveclub.co.uk');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '/');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', '/home/gloveclu/public_html/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

define('DB_SERVER', 'localhost'); // eg, localhost - should not be NULL for productive servers

define('DB_SERVER_USERNAME', '**********);

define('DB_SERVER_PASSWORD', '**********');

define('DB_DATABASE', 'gloveclu_osc1');

define('USE_PCONNECT', 'false'); // use persistent connections?

define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'

?>

 

 

On the administration page it still tells me that my site is not protected by ssl, is there a problem with the configuration file?

 

I have also noticed on the Credit Card module there is no option for the card security number, the door number and postcode for the registered card. Is there any way of adding these?

 

Finally when a customer registers an email is sent from the following receipient '[email protected]' I would prefer if the email was sent from the @gloveclub.co.uk domain, is tehre any way of doing this?

 

Thanks I hope someone can be of assistance

 

Regards

 

M Parmar

[♥Vger]

This is probably an automated install via Fantastico, so you need to go to your osC admin panel and enter your own e-mail address/es (three entries) under My Store

 

The 'Live Help' link you have is hard coded to an http address, so this needs to be changed to remove the secure/nonsecure warning when someone switches to https.

 

There is no cvv number as part of the CC module, but there is a contribution for this.

 

The door number is taken from the Address line in the Create Account page.

 

In your admin/includes/configure.php file make the two http addresses also read as https://yourdomain.co.uk and then you will get the lock.

 

Vger

[parma]

Hey Vger,

 

Thanks for the reply.

 

The code below is my admin/includes/configure.php

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://gloveclub.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTP_CATALOG_SERVER', 'http://gloveclub.co.uk');

define('HTTPS_CATALOG_SERVER', 'https://gloveclub.co.uk');

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

define('DIR_FS_DOCUMENT_ROOT', '/home/gloveclu/public_html/'); // where the pages are located on the server

define('DIR_WS_ADMIN', '/admin/'); // absolute path required

define('DIR_FS_ADMIN', '/home/gloveclu/public_html/admin/'); // absolute pate required

define('DIR_WS_CATALOG', '/'); // absolute path required

define('DIR_FS_CATALOG', '/home/gloveclu/public_html/'); // absolute path required

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');

define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');

define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

 

 

and code below is from my /includes/configure.php

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://gloveclub.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://gloveclub.co.uk'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'gloveclub.co.uk');

define('HTTPS_COOKIE_DOMAIN', 'gloveclub.co.uk');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '/');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', '/home/gloveclu/public_html/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

I have tried making the changes you said however, the ssl hasnt locked :( maybe its because i havent configured it correctly. Is there a mistake in the code?

 

Regards

 

M Parmar

[♥Vger]

admin/includes/configure.php

---------------------------------

 

define('HTTP_SERVER', 'https://gloveclub.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTP_CATALOG_SERVER', 'https://gloveclub.co.uk');

define('HTTPS_CATALOG_SERVER', 'https://gloveclub.co.uk');

 

That should get and keep the lock on your 'admin' panel.

 

Your other configure.php file is fine.

 

Vger

[parma]

Thanks Vger again, I have made the changes. The admin page only shows the site as being secure if I log in using https://gloveclub.co.uk/admin and if I log in using http://gloveclub.co.uk it says the site is not protected.

 

Is this how it works ? or is there anther change that needs to be made?

 

Thanks for your help, there is progress being made !

 

Regards

 

M Parmar

[♥Vger]

This may or may not work on your server, but you can try it out.

 

If your admin is protected then there should already a be a .htaccess file in the admin folder. Try adding these two lines to it (edit for your site):

 

SSLRequireSSL

ErrorDocument 403 https://www.yourdomain.com/admin/

 

If your server is up to it then all connections will be routed to https.

 

Vger

[parma]

Thanks for the help Vger, editing .htaccess has sorted the problem!

 

Now my site is secure :D yay thanks again.

 

How should I put the support help on the right column so that it doesnt say it is unsecure?

 

Thanks again

 

M Parmar