SSL problem

[supersprint]

www.supersprint-exhausts.co.uk/catalog

 

I have a dedicated ssl with my host 1and1 and I have contacted them asking why its not working properly and they told me I need to change something my side. Is it in the includes/configure.php file?

 

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

 

Do I change the

// secure webserver for checkout procedure?

to something else maybe? lol

 

Sorry I'm a newbie :'( .

[supersprint]

Anyone?

 

I've searched for the answer on the forums until my eyes hurt but couldn't find anything.

[davidinottawa]

www.supersprint-exhausts.co.uk/catalog

 

I have a dedicated ssl with my host 1and1 and I have contacted them asking why its not working properly and they told me I need to change something my side. Is it in the includes/configure.php file?

 

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

 

Do I change the

// secure webserver for checkout procedure?

to something else maybe? lol

 

Sorry I'm a newbie :'( .

 

You need to take a look at your /includes/configure.php and admin/includes/configure.php files.

If you post the includes/configure.php file here that would help.

BE SURE TO REMOVE YOUR DATABASE CONNECTION STRINGS BEFORE POSTING.

 

This may heklp as well :

http://www.oscommerce.info/kb/osCommerce/G...mon_Problems/75

 

It's likley you need the https:// path set properly :

define('HTTP_SERVER', 'http://www.yourdomain.com'); // eg, http://localhost - should not be empty for productive servers
define('HTTPS_SERVER', 'https://yourdomain.com'); // eg, https://localhost - should not be empty for productive servers
define('ENABLE_SSL', true); // secure webserver for checkout procedure?
define('HTTP_COOKIE_DOMAIN', 'www.yourdomain.com');
define('HTTPS_COOKIE_DOMAIN', 'yourdomain.com');
define('HTTP_COOKIE_PATH', '/catalog/');
define('HTTPS_COOKIE_PATH', '/catalog/');
define('DIR_WS_HTTP_CATALOG', '/catalog/');
define('DIR_WS_HTTPS_CATALOG', '/catalog/');

 

and btw - forward slashes :

//

are comments within a php file.

And to comment out a block of code use /* like this :

/*

code

code

code

*/

 

david

[drone]

Whats not working properly?

[supersprint]

Whats not working properly?

 

Well on my pc here I don't get any message saying im in a secure connection. I don't get a padlock symbol. On my home pc a message pops up saying im about to view unsecure pages and this happens with every page I visit within the https range. If you understand that?

[supersprint]

<?php
/*
 osCommerce, Open Source E-Commerce Solutions
 http://www.oscommerce.com

 Copyright (c) 2003 osCommerce

 Released under the GNU General Public License
*/

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
 define('HTTP_SERVER', 'http://www.supersprint-exhausts.co.uk'); // eg, http://localhost - should not be empty for productive servers
 define('HTTPS_SERVER', 'https://www.supersprint-exhausts.co.uk'); // eg, https://localhost - should not be empty for productive servers
 define('ENABLE_SSL', true); // secure webserver for checkout procedure?
 define('HTTP_COOKIE_DOMAIN', 'www.supersprint-exhausts.co.uk');
 define('HTTPS_COOKIE_DOMAIN', 'www.supersprint-exhausts.co.uk');
 define('HTTP_COOKIE_PATH', '/catalog/');
 define('HTTPS_COOKIE_PATH', '/catalog/');
 define('DIR_WS_HTTP_CATALOG', '/catalog/');
 define('DIR_WS_HTTPS_CATALOG', '/catalog/');
 define('DIR_WS_IMAGES', 'images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
 define('DIR_FS_CATALOG', '/kunden/homepages/44/d194939030/htdocs/catalog/');
 define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
 define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

// define our database connection
 define('DB_SERVER', '********'); // eg, localhost - should not be empty for productive servers
 define('DB_SERVER_USERNAME', '********');
 define('DB_SERVER_PASSWORD', '*******');
 define('DB_DATABASE', '*********');
 define('USE_PCONNECT', 'true'); // use persistent connections?
 define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'
?>

[supersprint]

 

 

 

 

When I first setup the oscommerce shop I selected the box that asks if you have a ssl setup. Except I didn't at the time. Whoops. Is this why I am having problems now?

 

How do I fix it?

[satish]

If no SSL

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

to be

define('ENABLE_SSL', false); // secure webserver for checkout procedure?

 

 

Satish Mantri

[supersprint]

Thankyou Satish

 

However I DO want SSL on my site.

 

I may just start from scratch *sigh*

[natewlew]

If you look at your page source in one of your secure pages you will find this:

<base href="http://www.supersprint-exhausts.co.uk/catalog/">

Your server doesn't think that you are secure.

 

I found this on another post. Open your includes/application_top.php:

Replace:

$request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';

 

 

with this:

 

$request_type = (eregi ($HTTP_HOST, HTTPS_SERVER)) ? 'SSL' : 'NONSSL';

See if that helps.

[drone]

Im having the same problems on my site at the moment too:

 

http://www.peasorbeans.co.uk

 

I thought the SSL 'Unauthorised Content' was a caused by links and images in the code but Ive checked and double checked.

 

Like yourself I am using 1and1 dedicated SSL:

 

I also posted this which maybe linked.

 

http://www.oscommerce.com/forums/index.php?showtopic=249598

[natewlew]

Copy and save this text as ssl.php. Upload it to your server. Go to it in your browser secure and non-secure. Then tell me what it said.

<?php

 

if (getenv('HTTPS') == 'on') {

echo 'You are Secure';

} else {

echo 'You are not secure';

}

?>

[supersprint]

Nate,

 

In both http and https the message I get on screen is 'You are not secure'

[supersprint]

Additional:

 

This was after I made those changes in application_top.php

[natewlew]

Copy and save this as ssl.php and see if it works?

<?php

 

if ($_SERVER['SERVER_PORT'] == '443') {

echo 'You are Secure';

} else {

echo 'You are not secure';

}

?>

[supersprint]

https = You are secure

http = You are not secure

 

Have we (you) cracked it? lol

[natewlew]

I think so.

 

If you made that change before you should have a line that looks like this in your includes/application_top.php:

$request_type = (eregi ($HTTP_HOST, HTTPS_SERVER)) ? 'SSL' : 'NONSSL';

If you didn't your line will look like this (or you changed it back):

$request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';

Now change that line to:

$request_type = ($_SERVER['SERVER_PORT'] == '443') ? 'SSL' : 'NONSSL';

See if that fixes your problem?

[supersprint]

Thanks Nate

 

It doesn't appear to have changed for the better.

 

When I log into my test account it still says I am going to be re-directed to a connection that is not secure. The padlock symbol is showing though. Im still being told in my admin area that im not protected by a secure ssl connection.

[natewlew]

Your admin area is a different problem. You storefront seems to be working correctly.

<base href="https://www.supersprint-exhausts.co.uk/catalog/">

Open your admin/includes/configure.php.

define('HTTP_SERVER', 'https://www.yoursite.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTP_CATALOG_SERVER', 'https://www.yoursite.com');

define('HTTPS_CATALOG_SERVER', 'https://www.yoursite.com');

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

The HTTP_SERVER, HTTP_CATALOG_SERVER and HTTPS_CATALOG_SERVER all need to be secure links.

[supersprint]

Yes it all seems to be working now!

 

Thanks so much for sorting this for me.

 

If you ever want a Supersprint exhaust I can sort you out with a nice discount :D ;)