secure webserver for administration tool...

[dms]

i cant seem to get the admin portion of the site to use my https. ive double and trippled checked the admin/includes/configure.php, as you can see below everything looks to be in order, but when i load the admin portal all the hyper links throughout point to http, not my https. the catalog switch to go to https for checkout is working just fine though (after i edited the catalog configure.php). just cant get the admin to use https....any ideas?

 

-----------------

define('HTTP_SERVER', 'http://192.168.1.109');

define('HTTPS_SERVER', 'https://192.168.1.109');

define('HTTP_CATALOG_SERVER', 'http://192.168.1.109');

define('HTTPS_CATALOG_SERVER', 'https://192.168.1.109');

define('ENABLE_SSL', 'true'); // secure webserver for administration tool

define('ENABLE_SSL_CATALOG', 'false'); // secure webserver for catalog

----------------

[JerryR]

define('HTTP_SERVER', 'http://192.168.1.109');

 

Perhaps this is NOT the proper way to do it but i would CHANGE this to

define('HTTPS_SERVER', 'http://192.168.1.109');

 

Again this may NOT be the proper way to do it but if you change the HTTP to HTTPS then all resulting pages will use SSL

PLEASE correct me if im wrong... but it does work

[dms]

it does work, thanks. its a fix to the problem, good enough for me!

[JerryR]

Your welcome. I have this sneaky suspsion that it is folly to be done this way. I have more reading up to do... but yes, it does work... we can breath a sigh of (temporary) relief.

[mattice]

It's okay to do it this way if it works for you.

Just don't ever do it with the catalog part as SSL connections take up more resources then regular http connections.

[JerryR]

ok, posting when im tired and had little sleep leads to misinformation. The configure.php in admin/includes would read as follows to enable SSL:

 

define('HTTP_SERVER', 'https://192.168.1.109');

define('HTTPS_SERVER', 'https://192.168.1.109');

 

Sorry 'bout that. if you notice both HTTP_SERVER and HTTPS_SERVER refer to 'https://192.168.1.109'.... ofcourse, my server has a different number but thats how i have it set up.

 

I should get my eyes checked or get more sleep! :?

[Mark Evans]

define('HTTP_SERVER', 'https://192.168.1.109');

define('HTTPS_SERVER', 'https://192.168.1.109');

 

You will find in more recent snaphots the 'HTTPS_SERVER' parameter has been removed from the admin/includes/configure.php in CVS to try and make things a little easier to understand :)

[greysun]

I tried setting my configure file up as suggested but it doesnt work

Here is the code I am using

 

define('HTTP_SERVER', 'https://secure24.mysecureorder.net/myhost/');

// eg, http://localhost - should not be NULL for productive servers

define('HTTPS_SERVER', 'https://secure24.mysecureorder.net/myhost/');

// eg, https://localhost - should not be NULL for productive servers

 

My catalog is able to use ssl no problem but its not working with admin

[Mark Evans]

define('HTTP_SERVER', 'https://secure24.mysecureorder.net/myhost/');

define('HTTPS_SERVER', 'https://secure24.mysecureorder.net/myhost/');

 

Remove the /myhost/ part as this is not part of the HTTPS address.

 

Add that to

 

define('DIR_WS_ADMIN', '/myhost/admin/');

[greysun]

For some reason this doesnt work. WHen I try to use https to call my admin page it just says it cant find the page. But it goes right to it just fine.

in fact none of the changes I am making seem to be making any difference. if I click on admin it just loads as normal it doesnt even try to go to https I have to type it in manually. Is it ok to paste the whole content of the file here for you too look at? Maybe you can spot the changes that need be made

[prim]

hi ,

i just had a similar problem so if you want i can send you the content of my file / at least the part that is for the configuration/

 

I am on a shared secure server.

[greysun]

if you could that would be great.

 

I would really appreciate it

 

the email is

 

[email protected]

[prim]

ithe only problem is that now i run into another probelm .. for some reason the catalog files can not be found so it doesnt load the modules.. but i am sendingyou what i have till no w...

[greysun]

OK before I recieved your email I tried to access admin again. now it is saying

You are protected by a unknown secure SSL connection

but the address is still http://www instead of https://

 

is this ok? Am I secured?

 

if so I can send you my file. this may help you solve your problem

[prim]

i wouldnt mind trying to see if at least my files will appear with your script.

 

do you have a lock icon onyour browser when you access the admin?

 

you should have my email address. Thanks

[greysun]

umm... no for some reason I have a lock in the admin box at the bottom left but not on the bottom right of the browser bar. Not sure whats going on here. Is there anyone out there who knows if this means that I am secured or not?

 

I will still send you my file if you like. maybe you can play with it and get the other lock to pop up

[prim]

well in most of the caes if you dont have lock icon on your browser that means its not a secure connection .. sorry :(

[greysun]

Is anyone willing to look at my admin configure file to see what I'm doing wrong?

[greysun]

OK I figured out how to get the lock when I first go into admin but any link I click on from admin does not display the lock. I know its something I am doing wrong in admin but I cant figure out what.

 

Here is what the files looks like.

Does anyone see anything wrong?

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'https://secure24.mysecureorder.net/');

// eg, http://localhost - should not be NULL for productive servers

define('HTTPS_SERVER', 'https://secure24.mysecureorder.net/');

// eg, https://localhost - should not be NULL for productive servers

define('HTTP_CATALOG_SERVER', 'https://www.bullislandmerchandising.com');

define('HTTPS_CATALOG_SERVER', 'https://secure24.mysecureorder.net/bullislandmerchandising/');

define('ENABLE_SSL', 'true'); // secure webserver for administration tool

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

define('DIR_FS_DOCUMENT_ROOT', '/home/bullisla/bullisla-www'); // where the pages are located on the server

define('DIR_WS_ADMIN', '/home/bullisla/bullisla-www/admin'); // absolute path required

define('DIR_FS_ADMIN', '/home/bullisla/bullisla-www/admin'); // absolute pate required

define('DIR_WS_CATALOG', '/catalog/'); // absolute path required

define('DIR_FS_CATALOG', '/home/bullisla/bullisla-www/catalog/'); // absolute path required

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');

define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');

define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

[prim]

did you receive my email with how i got it to work?

I sent it to emaila ddress you had gave me before.

Let me know i can send it agian

 

I manage to make it work and show allimages and go through SSL for all the pages

[greysun]

I did get it.

thank you

 

I havent had a chance to try to compare yours with the one i'm using yet though. I have a couple of projects I am working on. I will hopefully get to it tonight and I will let you know what happens.

 

Thanks again

[UHP]

I'm glad I found this post, I've spent quite a bit of time on this problem!!!

 

The fix suggested works according to my browser, but the box on the the bottom left of my main Admin page says, "You are not protected by a secure SSL connection." The important thing is that my Admin section is now secure, but is there any way to get osC to acknowledge that???

 

It's not THAT important, but it would be nice...

[fadedlazer]

since the newer snapshot does not have define (https_server)

Could we add that in as part of the file, in order to access admin by either ssl or jusr regular http? I want to access by https in public places and regular at my place.

 

Would defining it mean I have to change other files?

[fadedlazer]

Oh yes, I am also using a shared ssl to secure admin, so if I can add another define..there would have to be a way to keep all links in admin to go to the secure link instead of the regular one

[charles]

See my post

 

http://www.oscommerce.com/forums/index.php?sho...ndpost&p=277152

 

Good luck, Charles