Partial SSL Encryption on Catalog Area

[Ramsay]

I have setup SSL with Geotrust and hosting with 1and1.

 

When I login to my catalog account it shows 'Connection Partially Encrypted', this also happens when making an order. Is there something wrong in my configure.php files?

 

On my administration panel I have enabled SSL with the 'Secure Admin Login - Logout 1.5' contribution. I have full SSL according to firefox with this - but when logged in oscommerce tells me:

 

'You are not protected by a secure SSL connection.' in the bottom left after login - Even though the full padlock is diplayed :S :(

 

Contributions Installed: STSv43 (Simple Template System), Protx Direct v3.0a, Secure Admin Login - Logout 1.5

 

-Help much appreciated

-Ramsay

[abra123cadabra]

If you have any javascripts like counters or google analytics added to your footer or header, check that they are using https://... on pages which should be encrypted and that all your references to images are relative instead of absolute paths.

 

As for the admin, you have to change the configure file to always use https even when it says http server (or similar).

 

abra

[Ramsay]

I fixed the issue on the catalog side of things... thankyou. But I have not fixed the error on the admin side - it still shows:

 

'You are not protected by a secure SSL connection.' in the bottom left after login.

 

Also the catalog area enters into SSL on nearly every page causing the site to slow down considerably how can i fix this issue?

[abra123cadabra]

In the catalog area the following pages should be SSL protected: login, account pages, checkout pages. The product pages shouldn't be encrypted.

 

As for the admin: in your /catalog/admin/includes/configure.php try these settings:

  define('HTTP_SERVER', 'https://www.yourdomain.com'); // eg, http://localhost or - https://localhost should not be NULL for productive servers
 define('HTTPS_SERVER', 'https://www.yourdomain.com');
 define('HTTP_CATALOG_SERVER', 'http://www.yourdomain.com');
 define('HTTPS_CATALOG_SERVER', 'https://www.yourdomain.com');
 define('ENABLE_SSL_CATALOG', 'TRUE'); // secure webserver for catalog module

 

If you post a link to your shop we can have a look at what pages should or shouldn't be encrypted and maybe which settings you need to change in your catalog/includes/configure.php.

 

abra

[Ramsay]

In the catalog area the following pages should be SSL protected: login, account pages, checkout pages. The product pages shouldn't be encrypted.

 

As for the admin: in your /catalog/admin/includes/configure.php try these settings:

  define('HTTP_SERVER', 'https://www.yourdomain.com'); // eg, http://localhost or - https://localhost should not be NULL for productive servers
 define('HTTPS_SERVER', 'https://www.yourdomain.com');
 define('HTTP_CATALOG_SERVER', 'http://www.yourdomain.com');
 define('HTTPS_CATALOG_SERVER', 'https://www.yourdomain.com');
 define('ENABLE_SSL_CATALOG', 'TRUE'); // secure webserver for catalog module

 

If you post a link to your shop we can have a look at what pages should or shouldn't be encrypted and maybe which settings you need to change in your catalog/includes/configure.php.

 

abra

 

Thanks for the help but that didn't work. See this topic for progress on this issue:

 

http://www.oscommerce.com/forums/index.php?showtopic=241675