SSL HELP

[Guest]

So here is the deal... I am running OsCommerce on a Windows hosting account with http://www.ixwebhosting.com IxWebhosting. I have enabled ssl check out, and now I can access the site on the ssl side of things, but all the subsuquient links are refering back to the non secure side of our server.

 

The Site is https://www.foresthomeoutfitters.org/catalog

 

 

Thanks in advance...

 

Billy Gedney

 

This is a repost of http://www.oscommerce.com/forums/index.php?showtopic=187192

Because the guy who was helping me, fell off the face of the earth.

[ozcsys]

So here is the deal... I am running OsCommerce on a Windows hosting account with http://www.ixwebhosting.com IxWebhosting. I have enabled ssl check out, and now I can access the site on the ssl side of things, but all the subsuquient links are refering back to the non secure side of our server.

 

The Site is https://www.foresthomeoutfitters.org/catalog

Thanks in advance...

 

Billy Gedney

 

This is a repost of http://www.oscommerce.com/forums/index.php?showtopic=187192

Because the guy who was helping me, fell off the face of the earth.

 

You need to set ssl to true in your configure.php file and set the correct https: paths there as well.

 

Your whole site will not be https: only the parts that are needed. If setup correctly osC will switch back and forth as needed without any problems. It will go to secure mode during checkout or when customer data is being collected and then back to non-secure when browsing the site.

[Guest]

<?php

/*

$Id: configure.php,v 1.4.2.5 2003/12/17 12:22:51 serg Exp $

 

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://www.foresthomeoutfitters.org'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://foresthomeoutfitters.org'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'foresthomeoutfitters.org');

define('HTTPS_COOKIE_DOMAIN', 'foresthomeoutfitters.org');

define('HTTP_COOKIE_PATH', '/catalog/');

define('HTTPS_COOKIE_PATH', '/catalog/');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

 

define('DIR_WS_IMAGES', '/catalog/images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']));

 

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

define('DB_SERVER', ''); // eg, localhost - should not be empty for productive servers

define('DB_SERVER_USERNAME', '');

define('DB_SERVER_PASSWORD', '');

define('DB_DATABASE', 'osCommerce');

define('USE_PCONNECT', 'false'); // use persistent connections?

define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

?>

[ozcsys]

You configure.php file looks good but it does not seem to be the one that is being used for your site. A lot of times on windows servers when you upload a file it will not overwrite the existing one. What I would do is delete the existing file first and then upload the new one and see if that helps.

[Guest]

I will try. I am working on my mac using golive, editing the file via its FTP/webDAV thingie.

[Guest]

I did that. no change.

 

http://www.foresthomeoutfitters.org/info.php

[Guest]

https://www.foresthomeoutfitters.org/info.php

[ozcsys]

I did that. no change.

 

http://www.foresthomeoutfitters.org/info.php

 

Go into your hosting control panel and use the file manager tool and check to see what your configure.php file really looks like.

 

Personally if it was me I would rethink the whole windows server idea. While I have been able to get osC working on a windows server a couple of times it never really seemed worth the trouble.

[Guest]

Thats always positive...

[♥Vger]

You know you can't really say that someone who was previously trying to help you had 'dropped off the face of the earth' just because they hadn't been online for a couple of hours.

 

Your configure.php files are all wrong. I have been to your site, typed http://foresthomeoutfitters.org into the browser and got a warning about whether I wanted to proceed because the ssl cert did not match the domain. I accepted the redirect and was sent to https://foresthomeoutfitters.org/catalog

 

The first thing you need to do (for now at least) is to remove the .htaccess permanent redirect in the root of your domain - because this is confusing everything. Once someone gets to your osCommerce site the links that should be https are http links (login.php etc.).

 

You need to check and find out if you have alternative configure.php files inside either of the includes/local/ folders. If you find any then either rename them or delete them.

 

If you don't find any in the 'local' folders then I suspect that you are editing files on your computer and uploading them to your site, but your site is unable to overwrite the existing configure.php files because they are set to Read Only permissions.

 

Vger

[Guest]

bad call on removing the configure from the /includes/local/

Take a look at my site.

[Guest]

I had a backup.

 

I also changed the enable_ssl from 0 to 1 and it works

[♥Vger]

bad call on removing the configure from the /includes/local/

 

If you re-read what I said, my advice was to either rename OR delete them. The choice was yours. Either way deleting them should make no difference to your website provided your includes/ and admin/includes/configure.php files are set up correctly. Obviously they aren't which is why you had a problem when you deleted the 'local' ones. The local ones are for development purposes only, and should not be used for a working website.

 

Anyway, I'm going to 'drop off the face of the earth' now.

 

Vger

[ozcsys]

Thats always positive...

 

 

About the windows servers?

 

What I said is true. I can set up osC on a properly setup server in 30 minutes or so, maybe a little longer if we have to install a ssl cert and most of that time is uploading files.

 

What I said about the windows servers is just as true about any server that causes you to have problems getting or keeping your site up and going (yahoo and godaddy hosting comes to mind). Why would you spend hours or days just trying to get your site setup when you could be spending that time setting up your products or trying to work on getting sales or attending to your customers. For me the answer is that it does not really make much sense.

 

I have seen lots of people over the course of the last couple of years spends days or even weeks getting osC up and working correctly because of server issues and it seems like such a huge waste of time and energy to me.

 

Getting your site up and running should be the easy part not the hard part!!