SSL cert installed but admin still shows "not protected"

[mwo]

HI. I have installed a full SSL cert and it looks like it is working fine on my site. My admin section however, still shows "not protected by a secure SSL cert". Why would this be?

 

Any help gratefully appreciated, mwo.

[hbiztx06]

Honestly, I've followed most every "contribution" to the SSL and Admin module on the forum, and still have not found a solution.

 

I just protected the "admin" directory for now, until i find something that works.

 

Good Luck, SG

[WhiteBlade]

Try sometthing like this when you go to your admin panel.

 

https://www.yourdomain.com/catalog/admin

 

the s in https is suppose to activate the ssl

[giannamanuela]

Honestly, I've followed most every "contribution" to the SSL and Admin module on the forum, and still have not found a solution.

 

I got tired of looking at the forums and I search the web for a solution.

I think I found it at:

 

http://www.cse.unsw.edu.au/faq/questions/www-htaccess.html

 

I added this lines into the .htaccess file and works for me.

 

<IfModule mod_ssl.c>

SSLRequireSSL

</IfModule>

<IfModule !mod_ssl.c>

# no non-ssl access

Redirect permanent / https://localhost/

</IfModule>

 

That code is forcing to use ssl and also is redirecting in the case somebody types http.

[Gil_e_n]

You know, it probably makes your admin section a little more secure if you don't let it redirect you to ssl if you type in the non-ssl url.

 

And also, as I understand it, I don't think you have the entire admin section under ssl, just the entry page, even with the redirect? FWIW, I recommend in your admin/includes/configure.php, setting HTTP_SERVER to your secure site. Like this:

 

define('HTTP_SERVER', 'https://secure.yoursite.com');

 

It secures your entire admin section.