configuring/turning on SSL in OSC?

[keo77]

does anyone know if you have to configure or turn on your SSL in OSC? my host seems to think this is needed, my site isnt working at the moment as the SSL is stopping new customers from registering :o(

[jasonabc]

This is a very good place to start:

 

http://www.oscommerce.com/forums/index.php?showtopic=151162

[keo77]

This is a very good place to start:

 

http://www.oscommerce.com/forums/index.php?showtopic=151162

 

have looked through that, cheers! but im still having the problem of customers registering, its almost as if it has stopped submitting the form and just resets it instead, is it possible for the SSL to upset the create_account.php ????

[jasonabc]

its almost as if it has stopped submitting the form and just resets it instead

 

It's *almost* as if it does this - or this is what it does?

 

What's the URL of your store?

[keo77]

It's *almost* as if it does this - or this is what it does?

 

What's the URL of your store?

 

it does stop them from registering, it has me baffled :( url is: http://www.shamrockrovers.ie/srfcshop

[jasonabc]

Hmmm this site seems to be in reverse! When I went to your site it redirected me straight over to a secure connection (https://www.shamrockrovers.ie/srfcshop/ instead of http://www.shamrockrovers.ie/srfcshop/)

 

The links that should point to the secure areas on your site all point to a non secure page (http://www.shamrockrovers.ie/srfcshop/create_account.php instead of https://www.shamrockrovers.ie/srfcshop/create_account.php).

 

Post your config file here (minus the db name, username and password)

[keo77]

Hmmm this site seems to be in reverse! When I went to your site it redirected me straight over to a secure connection (https://www.shamrockrovers.ie/srfcshop/ instead of http://www.shamrockrovers.ie/srfcshop/)

 

The links that should point to the secure areas on your site all point to a non secure page (http://www.shamrockrovers.ie/srfcshop/create_account.php instead of https://www.shamrockrovers.ie/srfcshop/create_account.php).

 

Post your config file here (minus the db name, username and password)

 

 

I asked the host to force the SSL for shamrockrovers.ie/srfcshop this is when it went funny on me, should i have asked him to force it for shamrockrovers.ie/srfcshop/create_account.php?

 

im new to this SSL lark so forgive me :huh:

 

heres the code for the config file:

 

<?php

/*

$Id: configure.php,v 1.14 2003/07/09 01:15:48 hpdl Exp $

 

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://www.shamrockrovers.ie'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'http://www.shamrockrovers.ie'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.shamrockrovers.ie');

define('HTTPS_COOKIE_DOMAIN', 'www.shamrockrovers.ie');

define('HTTP_COOKIE_PATH', 'http://www.shamrockrovers.ie/srfcshop');

define('HTTPS_COOKIE_PATH', 'http://www.shamrockrovers.ie/srfcshop');

define('DIR_WS_HTTP_CATALOG', '/srfcshop/');

define('DIR_WS_HTTPS_CATALOG', '/srfcshop/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers

define('DB_SERVER_USERNAME', '*************');

define('DB_SERVER_PASSWORD', '**********');

define('DB_DATABASE', '************');

define('USE_PCONNECT', 'false'); // use persistent connections?

define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'

?>

[keo77]

I have just tried typing in www.shamrock.ie/srfcshop in IE and the page appears but it doesnt seem to be picking up the style sheet???? very weird as it works fine in firefox and was working fine on IE today in work, is this getting a bit twighlight zone or does IE not like the style sheet or is it just me??

[keo77]

I have just tried typing in www.shamrock.ie/srfcshop in IE and the page appears but it doesnt seem to be picking up the style sheet???? very weird as it works fine in firefox and was working fine on IE today in work, is this getting a bit twighlight zone or does IE not like the style sheet or is it just me??

[jasonabc]

I asked the host to force the SSL for shamrockrovers.ie/srfcshop

 

You shouldn't have to ask your ISP to "force" anything. If your site is correctly configured it will work - no force neccessary ;-)

 

You have enabled SSL but have no references anywhere to the secure area of your site. Change the top bit of your config file to this:

 

define('HTTP_SERVER', 'http://www.shamrockrovers.ie'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://www.shamrockrovers.ie'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'shamrockrovers.ie');

define('HTTPS_COOKIE_DOMAIN', 'https://www.shamrockrovers.ie');

define('HTTP_COOKIE_PATH', '/srfcshop/');

define('HTTPS_COOKIE_PATH', '/srfcshop/');

[keo77]

You shouldn't have to ask your ISP to "force" anything. If your site is correctly configured it will work - no force neccessary ;-)

 

You have enabled SSL but have no references anywhere to the secure area of your site. Change the top bit of your config file to this:

 

define('HTTP_SERVER', 'http://www.shamrockrovers.ie'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://www.shamrockrovers.ie'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'shamrockrovers.ie');

define('HTTPS_COOKIE_DOMAIN', 'https://www.shamrockrovers.ie');

define('HTTP_COOKIE_PATH', '/srfcshop/');

define('HTTPS_COOKIE_PATH', '/srfcshop/');

 

 

ok cool! will try that out, and ill get on to the host and tell them to un-force the SSL B) Cheers!

[keo77]

ok cool! will try that out, and ill get on to the host and tell them to un-force the SSL B) Cheers!

 

 

Worked a Treat! :thumbsup: registration is working again. Thanks a Million :)

[jasonabc]

no problem - go Rovers!!

 

;-))