SSL Question

[locust13]

Hello everyone,

I hate to be asking a question on SSL because a lot have been answered but on a search I've found a lot of the answers I'm not looking for.

When I hit checkout the SSL certificate bit pops up and checks off two things but the thing that's making it pop up (or so I think) is:

"The name on the security certificate is invailed or does not match the name of the site."

That's just when going from http to https and it asks if I want to procede.

[locust13]

Also, I have another problem. When someone logs in it gives them this message:

Warning: Cannot modify header information - headers already sent by (output started at /usr/local/psa/home/vhosts/gamewavecomputers.com/httpsdocs/includes/languages/english/login.php:1) in /usr/local/psa/home/vhosts/gamewavecomputers.com/httpsdocs/includes/functions/general.php on line 29

 

If you hit the back button, you're logged in but this will confuse customers. Someone please tell me the fix to this as well ^.^!

[jpweber]

The SSL problem is easy.

 

An SSL certificate issued to www.yourdomain.com can only be used on www.yourdomain.com. It cannot be used on secure.yourdomain.com or even just yourdomain.com

 

So make sure if it was issued to http://www.yourdomain.com, have your catalog/includes/configure.php match that.

 

If it was issued to http://yourdomain.com, have your catalog/includes/configure.php match that.

 

Make sense?

 

J

[locust13]

Hmm I understand a bit but...what do I edit here? This is in the httpdoc/includes directory. The one in httpsdocs/includes is only differnt on line 33 where it says httpsdocs and not httpdocs

 

 

So..what do I edit ^.^;?

 

<?php

/*

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://gamewavecomputers.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://gamewavecomputers.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'gamewavecomputers.com');

define('HTTPS_COOKIE_DOMAIN', 'gamewavecomputers.com');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '/');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', '/usr/local/psa/home/vhosts/gamewavecomputers.com/httpdocs/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers

define('DB_SERVER_USERNAME', 'HIDDENFROMFORUMS');

define('DB_SERVER_PASSWORD', 'HIDDENFROMFORUMS');

define('DB_DATABASE', 'HIDDENFROMFORUMS');

define('USE_PCONNECT', 'false'); // use persistent connections?

define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

?>

[jpweber]

Go to catalog/includes/configure.php, and edit it so it looks something like this:

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://www.yoursite.com');

define('HTTPS_SERVER', 'https://www.yoursite.com');

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'http://www.yoursite.com');

define('HTTPS_COOKIE_DOMAIN', 'https://www.yoursite.com');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '/');

 

 

If your certificate was issued to http://yoursite.com, just take out the www.

 

J

[locust13]

in what directory though? httpdocs or httpsdocs?

[locust13]

Fixed! Thanks much! I'll make a dif thread for my last question with the correct title. Thank you SO much for getting this fixed. I have a feeling some customers would be uneasy after seeing something popup when they wanted to login/pay money at checkout.