You are not protected by a secure SSL connection

[Slow Learner]

In my admin panel (which is password protected) on the bottom left corner it says

 

You are not protected by a secure SLL connection.

 

Is this just referring to my admin panel? I do have the https:// when on the site.

[Jack_mcs]

You have to enable ssl in the admin/includes/configure.php file just like you did in the includes/configure.php file for it to be secured.

 

Jack

[Chrissie]

You have to enable ssl in the admin/includes/configure.php file just like you did in the includes/configure.php file for it to be secured.

 

Jack

Jack, I am having this problem also. Could you explain what changes are needed please.

 

Many thanks.

 

Chrissie xx

[Jack_mcs]

Open your admin/includes/configure.php file and you will see three lines that have http in them. Make sure they are all https. Then set the enable option to true.

 

Jack

[Chrissie]

Open your admin/includes/configure.php file and you will see three lines that have http in them. Make sure they are all https. Then set the enable option to true.

 

Jack

Thanks Jack. Am I being stupid here? I followed your instruction but, although I could get to the admin front screen (still saying not protected) I could not get into any other function by clicking a link ... got a "page not found" error.

 

Any suggestions would be much appreciated.

 

Chrissie

xx

[Jack_mcs]

That sounds like a configure file setting is not correct. You should be able to click around in the admin section. Try posting your admin/includes/configure.php file here, minus the sensitive data.

 

Jack

[Chrissie]

That sounds like a configure file setting is not correct. You should be able to click around in the admin section. Try posting your admin/includes/configure.php file here, minus the sensitive data.

 

Jack

 

Thanks for your continuing support Jack. Here is the details from my configure.php file from 'Admin' with the sensitive bits starred out. If I change define('HTTP_SERVER', 'http://www.domain'); and define('HTTP_CATALOG_SERVER', 'http://www.domain'); to define('HTTP_SERVER', 'https://www.domain'); and define('HTTP_CATALOG_SERVER', 'https://www.domain'); I still get "not protected by SSL etc" and can't click on any Admin links. If you can throw any light on this I would be extremely grateful.

 

Chrissie xx

 

<?php
/*
 osCommerce, Open Source E-Commerce Solutions
 http://www.oscommerce.com

 Copyright (c) 2003 osCommerce

 Released under the GNU General Public License
*/

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
 define('HTTP_SERVER', 'http://www.domain'); // eg, http://localhost - should not be empty for productive servers
 define('HTTP_CATALOG_SERVER', 'http://www.domain');
 define('HTTPS_CATALOG_SERVER', 'https://ssl.domain/~*****');
 define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module
 define('DIR_FS_DOCUMENT_ROOT', '/home/*****/public_html/shop/'); // where the pages are located on the server
 define('DIR_WS_ADMIN', '/shop/admin/'); // absolute path required
 define('DIR_FS_ADMIN', '/home/*****/public_html/shop/admin/'); // absolute pate required
 define('DIR_WS_CATALOG', '/shop/'); // absolute path required
 define('DIR_FS_CATALOG', '/home/*****/public_html/shop/'); // absolute path required
 define('DIR_WS_IMAGES', 'images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
 define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');
 define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
 define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
 define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
 define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

// define our database connection
 define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers
 define('DB_SERVER_USERNAME', '*****_*****');
 define('DB_SERVER_PASSWORD', '*****');
 define('DB_DATABASE', '*****_*****');
 define('USE_PCONNECT', 'false'); // use persisstent connections?
 define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'
?>

[Jack_mcs]

You also have to change the location to the ssl path as in

define('HTTPS_CATALOG_SERVER', 'https://ssl.domain/~*****');

so

define('HTTP_SERVER', 'http://www.domain');

becomes

define('HTTP_SERVER', 'https://ssl.domain/~*****');

 

Jack

[Chrissie]

You also have to change the location to the ssl path as in

define('HTTPS_CATALOG_SERVER', 'https://ssl.domain/~*****');

so

define('HTTP_SERVER', 'http://www.domain');

becomes

define('HTTP_SERVER', 'https://ssl.domain/~*****');

 

Jack

 

Many thanks Jack. This now seems to be working. One quick final question: Should I make exactly the same change in the includes/configure.php file?

 

I see so many people asking about this problem and your answer is so straightforward that I would strongly suggest having this answer as a "sticky" to help loads of others.

 

You are now officially my hero!

 

Chrissie xx

[Jack_mcs]

Thank you. I appreciate the kind words. :) As for the other file, no, you shouldn't make them all ssl. That would protect all of the pages of the site, which is unnecesay and would just slow it down.

 

Jack