SSL - Stop the confusion!!! and help...

[Daria]

OK, I am installing the catalog in public area, and would like the checkout to be done securely.

 

I ran the installation and enabled SSL connection there.

 

Now I get errors anywhere where it points to https://

 

 

I am using the hosting provider SSL, and the path is correct, but still no result.

 

I can get the SSL file, but I don't know where to put it and what it sould be called.

 

Everywhere I searched, the common answer is to set the secure SSL to "false".

 

This is not the answer. It only makes the checkout process insecure.

 

Am I missing something here???

[mtechama]

OK, I am installing the catalog in public area, and would like the checkout to be done securely.

 

I ran the installation and enabled SSL connection there.

 

Now I get errors anywhere where it points to https://

I am using the hosting provider SSL, and the path is correct, but still no result.

 

I can get the SSL file, but I don't know where to put it and what it sould be called.

 

Everywhere I searched, the common answer is to set the secure SSL to "false".

 

This is not the answer. It only makes the checkout process insecure.

 

Am I missing something here???

 

ok in your configure.php make sure you set the SSL to True and make sure that your server has a SSL Cert. on your server if not it will work

[jpweber]

What kinds of errors are you talking about? Catalog/includes/Configure.php should definitely be set to true, so mte is right. For instance, it should look something like this, assuming you installed the SSL on the http://www.yoursite.com, and not http://yoursite.com:

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://www.yourwebsite.com');

define('HTTPS_SERVER', 'https://www.yourwebsite.com');

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'http://www.yourwebsite.com');

define('HTTPS_COOKIE_DOMAIN', 'https://www.yourwebsite.com');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '/');

 

Then the areas where end users enter information (like checkout) will be secure, with the https:// and the padlock.

 

J

[Daria]

Do I have to copy any files into secure area?

[jpweber]

Nope.

 

J

[Guest]

HI, I could do with a little help too:

 

I have the SSL working, padlock shows up and all good, BUT no images etc will display under SSL.

 

Any help for a confused newbie??

 

 

 

Thanks

[Guest]

HI, I could do with a little help too:

 

I have the SSL working, padlock shows up and all good, BUT no images etc will display under SSL.

 

Any help for a confused newbie??

Thanks

 

I have actually heard of this but never have experieced it, the advice that they gave was to rename the .htaccess file to old.htaccess in your images directory... Most people seemed to work for, but if that doesn't work try to delete it BUT BACK UP FIRST DON"T FORGET BACK UP

[Daria]

OK, I checked and re-checked, and tried 50 versions of the config files!!! This site is on shared cluster and I am using a shared SSL. the ssl path is correct and everything should be working.

 

I get "page cannot be displayed" on anything that goes to https://, such as account.php and checkout pages. See for yourself (ignore broken images and such, it is still a WIP)

 

http://cartronicsauto.com/catalog

 

What ticks me that if I install everything in secure area, the store works fine!!!

 

I need it to be in public for various reasons, including the one that we are going to have Google ads -that, as many of you know, are considered "non-secure items", and every page hiccups with this ugly message every time I try to do anything in secure.

 

So, I need the store - if not for any other reason, at least for this one - to function in public, with secure checkout.

 

I am getting very frustrated. The amount of post regarding SSL is simply - and literally - overwhelming - and I still had no success with it.

[jpweber]

Whoa, hang on Daria. Your links are all messed up. Why are your links going to

 

https://secure1.securewebexchange.com/cartronics ...?

 

To my knowledge, it should be https://cartronics.com/create_acount.php, or, if you have it set up as https://www.cartronics.com/create_account.php.

 

Why the secure1.securewebexchange.com before the cartronics?

 

J

[Daria]

because I am on the shared cluster, using shared SSL - and https://secure1.securewebexchange.com/ is where the SSL is.

 

I have a working miva shopping cart there right now, if you go to http://cartronicsauto.com it will redirect you, you will see. I am not happy with Miva right now, so I want to move to osCommerce with no success yet. I've tried it before a had a small cart working for another client who is no longer having a working website; nevertheless; that cart was done all in secure for the same reason of not being able to work out the SSL thing before; now I do not have a choice, I have to do the public installation with secure checkout and I am going NUTS!@

[Daria]

Here is a smiple test file I have in my secure area, just to demonstrate it should be OK.

 

 

https://secure1.securewebexchange.com/cartr...o.com/test.html