https:// but NO padlock

[Guest]

Think everyone who owns a store has had problems with SSL https:// but NO padlock. I've read messages going back to 2004 with SSL problems not sure if they are relevant to my problem, but here goes. Right hand click and select properties and you can see the certificate (https://toystore4boys.co.uk/catalog/login.php?osCsid=01befdc6acd80f3188b3953d4b96f1f0) that looks ok to me, but when looking at the .htaccess file mmm i'm not so sure

 

This is the contents of my .htaccess file

 

Options +FollowSymLinks

 

RewriteEngine On

 

RewriteCond %{HTTP_HOST} ^toystore4boys\.co.uk$ [NC]

 

RewriteRule ^(.*)$ http://www.toystore4boys.co.uk/$1 [R=301,L]

[oschellas]

You redirect your domain to the non ssl site. You should create rules for https as well.

[Guest]

You redirect your domain to the non ssl site. You should create rules for https as well.

 

sorry for sounding like a complete numpty but is that standard config for SSL ?

[oschellas]

The standard htaccess file that comes with oscommerce doesn't contain the redirecting lines you described above. A simple way to prevent your error is to install the catalog files in your web root folder and delete the added htaccess lines.

 

Otherwise you would have to change your htaccess lines to something like following:

 

RewriteEngine On

RewriteCond %{HTTP_HOST} ^www.toystore4boys.co.uk$

RewriteCond %{HTTP_HOST} ^toystore4boys.co.uk$

RewriteCond %{REQUEST_URI} !^/catalog/

RewriteRule ^(.*)$ /catalog/$1

[Guest]

The standard htaccess file that comes with oscommerce doesn't contain the redirecting lines you described above. A simple way to prevent your error is to install the catalog files in your web root folder and delete the added htaccess lines.

 

Otherwise you would have to change your htaccess lines to something like following:

 

RewriteEngine On

RewriteCond %{HTTP_HOST} ^www.toystore4boys.co.uk$

RewriteCond %{HTTP_HOST} ^toystore4boys.co.uk$

RewriteCond %{REQUEST_URI} !^/catalog/

RewriteRule ^(.*)$ /catalog/$1

 

I've been told by 1and1 that when I selected the domain to use my dedicated SSL I did not indicate it should be applied to www.toystore4boys.co.uk, not toystore4boys.co.uk is that correct. Also got to sat 1and1 are rubbish at supporting .....

[oschellas]

This problem was related to 1and1, a solution exists in the contributions.

[Guest]

This problem was related to 1and1, a solution exists in the contributions.

 

Christiaan,

 

Thank you very much, it has taken you less then half a day to fix this, just goes to show there is real value in forums, put 1and1 to shame perhaps you should knocking on their door for a job..

Many thanks

 

Jason Farrell