golpemortal Posted August 27, 2006 Share Posted August 27, 2006 :( I'm hosting few web-sites from my server and doing a oscommerse and everything is fine till I enable SSL, don't get me wrong I done some extensive reading, reading , reading and more reading on this forum and Google some more... here is the problem I purchased SSL cert and installed on this domain www.lajolladelights.com yes "www" but before this I installed free SSL for 30 day to a different domain just so I can practice before the purchased of the cert and registered to a different domain to www.dway2buy.com Worked fine under this domain daway2buy and then I decided to buy a cert to www.lajolladelights.com and installed there... When I go to www.lajolladelights.com click on log yourself in... I'll get a 404 file not found on the that page click on open the www.lajolladelights.com and it will take you to dwaytobuy page but the address on browser still says www.lajolladelights.com but this time there "S" on the http.. "You may get warning on the pop-up cert about mismatch of domain I'm aware of that and I know how fix that problem" if I do this in my server: I go to Internet information Services the click on the domain name dway2buy.com right click properties then click on tab of home directories and change path to lajolladelights.com domain name then ok PROBLEM FIXED HTTPS IS WORKING FINE on oscommerce!!!!!!!!! but can you see my problem fellows "IT"? Now when I go to a secure https://dway2buy.com I'll get an Error 403 - Forbidden... I know my problem lies on my server and I am hoping some one may light up brain a bit!!!!!!!!! Thanks guys Golpe Link to comment Share on other sites More sharing options...
robertgouveia Posted August 27, 2006 Share Posted August 27, 2006 i had a same problem i got my actual host to sort it out and they said it was a config.php note configured properly. i dont know which config file though sorry Link to comment Share on other sites More sharing options...
Jan Zonjee Posted August 27, 2006 Share Posted August 27, 2006 I know my problem lies on my server I always understood one server (one IP-address) can only use one SSL certificate. This webpage seems to confirm that: Host headers SSLHost headers are used by IIS as a means of serving multiple websites using the same IP address. As a SSL certificate requires a dedicated IP address host headers cannot be used with SSL. When the SSL protocol takes place the host header information is also encrypted - as a result the web server does not know which website to connect to. This is why a dedicated IP address per website must be used. Link to comment Share on other sites More sharing options...
golpemortal Posted August 27, 2006 Author Share Posted August 27, 2006 i had a same problem i got my actual host to sort it out and they said it was a config.php note configured properly. i dont know which config file though sorry config.php? that is in my oscommerce, would there be a problem like this? I would like to know which line of code so I can take a closer look!!!!!!!! any one else!!!!!!!!!! :'( :'( :'( Link to comment Share on other sites More sharing options...
golpemortal Posted August 27, 2006 Author Share Posted August 27, 2006 here is the code of includes/configure.php <?php /* osCommerce, Open Source E-Commerce Solutions http://www.oscommerce.com Copyright (c) 2003 osCommerce Released under the GNU General Public License */ // Define the webserver and path parameters // * DIR_FS_* = Filesystem directories (local/physical) // * DIR_WS_* = Webserver directories (virtual/URL) define('HTTP_SERVER', 'http://www.lajolladelights.com'); // eg, http://localhost - should not be empty for productive servers define('HTTPS_SERVER', 'https://www.lajolladelights.com'); // eg, https://localhost - should not be empty for productive servers define('ENABLE_SSL', true); // secure webserver for checkout procedure? define('HTTP_COOKIE_DOMAIN', 'www.lajolladelights.com'); define('HTTPS_COOKIE_DOMAIN', 'www.lajolladelights.com'); define('HTTP_COOKIE_PATH', '/'); define('HTTPS_COOKIE_PATH', '/'); define('DIR_WS_HTTP_CATALOG', '/'); define('DIR_WS_HTTPS_CATALOG', '/'); here is the admin/includes/configure.php <?php /* osCommerce, Open Source E-Commerce Solutions http://www.oscommerce.com Copyright (c) 2003 osCommerce Released under the GNU General Public License */ // Define the webserver and path parameters // * DIR_FS_* = Filesystem directories (local/physical) // * DIR_WS_* = Webserver directories (virtual/URL) define('HTTP_SERVER', 'http://www.lajolladelights.com'); // eg, http://localhost - should not be empty for productive servers define('HTTP_CATALOG_SERVER', 'http://www.lajolladelights.com'); define('HTTPS_CATALOG_SERVER','https://www.lajolladelights.com'); define('ENABLE_SSL_CATALOG','true'); //secure webserver for catalog module define('DIR_FS_DOCUMENT_ROOT', 'C:/Inetpub/wwwroot/lajolladelights/'); // where the pages are located on the server define('DIR_WS_ADMIN', '/admin/'); // absolute path required put both config so you can take a closer look... as I stated above on the first topic *** please read the problem***** yes the cert is for www.lajoladelights.com with the "WWW" Link to comment Share on other sites More sharing options...
golpemortal Posted August 28, 2006 Author Share Posted August 28, 2006 any one? :( :( :( Link to comment Share on other sites More sharing options...
PD_Steve Posted August 28, 2006 Share Posted August 28, 2006 Can you clarify what the problem is now. I can see that 'https://www.lajolladelights.com' is operating correctly, and your config files are absolutely fine. Is the problem you now have with the dway2buy.com? The 403 error I would assume is coming from the fact that you have no files on this server and have indexing switched off. If there are files on there, then check to see what your index.php or index.htm(l) is doing (i.e. is it the correct one). The problem with dway2buy.com is not related to SSL (albeit you do have a self-signing certificate on this domain and not a trusted one). The same happens if you use http or https on that domain. Hope that helps. If not, can you reclarify what the problem is because you original post is explaining something you have now fixed. Cheers Steve My Toolbox: Crimson Editor, Adobe Photoshop CS2.0, Expression Web, Macromedia Suite 8.0, Cinema 4D, Nvu. Link to comment Share on other sites More sharing options...
golpemortal Posted August 28, 2006 Author Share Posted August 28, 2006 Can you clarify what the problem is now. I can see that 'https://www.lajolladelights.com' is operating correctly, and your config files are absolutely fine. Is the problem you now have with the dway2buy.com? The 403 error I would assume is coming from the fact that you have no files on this server and have indexing switched off. If there are files on there, then check to see what your index.php or index.htm(l) is doing (i.e. is it the correct one). The problem with dway2buy.com is not related to SSL (albeit you do have a self-signing certificate on this domain and not a trusted one). The same happens if you use http or https on that domain. Hope that helps. If not, can you reclarify what the problem is because you original post is explaining something you have now fixed. Cheers Steve well here I go again.. I'm hosting few web-sites from my server and doing a oscommerse and everything is fine till I enable SSL, don't get me wrong I done some extensive reading, reading , reading and more reading on this forum and Google some more... here is the problem I purchased SSL cert and installed on this domain www.lajolladelights.com yes "www" but before this I installed free SSL for 30 day to a different domain just so I can practice before the purchased of the cert and registered to a different domain to www.dway2buy.com Worked fine under this domain daway2buy and then I decided to buy a cert to www.lajolladelights.com and installed there... When I go to www.lajolladelights.com click on log yourself in... I'll get a 404 file not found on the that page click on open the www.lajolladelights.com and it will take you to dwaytobuy page but the address on browser still says www.lajolladelights.com but this time there "S" on the http.. "You may get warning on the pop-up cert about mismatch of domain I'm aware of that and I know how fix that problem" if I do this in my server: I go to Internet information Services the click on the domain name dway2buy.com right click properties then click on tab of home directories and change path to lajolladelights.com domain name then ok PROBLEM FIXED HTTPS IS WORKING FINE on oscommerce!!!!!!!!! but can you see my problem fellows "IT"? Now when I go to a secure https://dway2buy.com I'll get an "Directory Denied" why because I changed the home directory to the lajolladelights on my server but by doing this the dway2buy domain is not working any more and that site is for a diff customer "he will get piss if don't fix this proble" question is why is this happerning? if I do point the home directory of dway2buy to where is supposse to then lajolladelights SSL will not work!!! am I making sense guys??? I know my problem lies on my server and I am hoping some one may light up brain a bit!!!!!!!!! Link to comment Share on other sites More sharing options...
PD_Steve Posted August 28, 2006 Share Posted August 28, 2006 Okay, I am assuming that the problem is just with dway2buy.com and nothing now to do with the original problem. Your first issue was twofold and I was trying to decipher what was solved and what was still broken. Dway2buy not working is nothing at all to do with SSL. Its broken in both http and https, so that confirms that its not the SSL certification causing the 403. A 403 error (or forbidden error) is usually caused by the way the directory is set up on your server. Howwever, the 403 error in this case is unusual as you can navigate to this page - https://www.dway2buy.com/index.php I did find the following information from another support forum:- "Sparkie@may2006: to get rid of the 403 forbidden error: loosen security settings in the httpd.conf by removing the lines "Order allow,deny" and " Allow from all" in the Directory-tag, which is located just below Documentroot (search on 'restrictive') Good Luck!" I am assuming this is your own dedicated server as you have multiple accounts. Make sure you backup the httpd.conf file though if you edit this because one mistake in that file and your complete server will fail to operate correctly. Finally, back to the SSL. Your certificate on Dway2buy.com is a self-signed certificate. It has the pop up box claiming that the cert is invalid. Are you aware this is a self-signed cert and not a trusted certificate and that people viewing that site are getting that box. You mentioned that you were using a trial certificate and that should not be self-signed. Cheers Steve My Toolbox: Crimson Editor, Adobe Photoshop CS2.0, Expression Web, Macromedia Suite 8.0, Cinema 4D, Nvu. Link to comment Share on other sites More sharing options...
PD_Steve Posted August 28, 2006 Share Posted August 28, 2006 I just checked the SSL certificate on Dway2buy.com and its actually the certificate for www.lajolladelights.com. Did you paste the crt for this into the certifcate box for both domains? Also, is Dway2buy.com supposed to be the same site as www.lajolladelights.com or should a different site be appearing. Cheers Steve My Toolbox: Crimson Editor, Adobe Photoshop CS2.0, Expression Web, Macromedia Suite 8.0, Cinema 4D, Nvu. Link to comment Share on other sites More sharing options...
golpemortal Posted August 28, 2006 Author Share Posted August 28, 2006 Okay, I am assuming that the problem is just with dway2buy.com and nothing now to do with the original problem. Your first issue was twofold and I was trying to decipher what was solved and what was still broken. Dway2buy not working is nothing at all to do with SSL. Its broken in both http and https, so that confirms that its not the SSL certification causing the 403. A 403 error (or forbidden error) is usually caused by the way the directory is set up on your server. Howwever, the 403 error in this case is unusual as you can navigate to this page - https://www.dway2buy.com/index.php I did find the following information from another support forum:- "Sparkie@may2006: to get rid of the 403 forbidden error: loosen security settings in the httpd.conf by removing the lines "Order allow,deny" and " Allow from all" in the Directory-tag, which is located just below Documentroot (search on 'restrictive') Good Luck!" I am assuming this is your own dedicated server as you have multiple accounts. Make sure you backup the httpd.conf file though if you edit this because one mistake in that file and your complete server will fail to operate correctly. Finally, back to the SSL. Your certificate on Dway2buy.com is a self-signed certificate. It has the pop up box claiming that the cert is invalid. Are you aware this is a self-signed cert and not a trusted certificate and that people viewing that site are getting that box. You mentioned that you were using a trial certificate and that should not be self-signed. Cheers Steve yes I'm aware of the cert problem!!!!!!!! that testing that was doing a while back, I will look into the httpd.conf and post later... thanks Link to comment Share on other sites More sharing options...
New 
Recommended Posts
Archived
This topic is now archived and is closed to further replies.