Problems With Ssl

[mapavin]

Hi,

 

I have installed OSC which works in principle fine. There appear problems when I want to open "My Account" and "Check Out". OSC tries to open a SSL connection, but my folder for SSL is empty and therefore I get an error message. During installation I have chosen to use SSL. My configuration.php file within the include folder looks as follows (note that sensitive text is replaced by stars):

 

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
 define('HTTP_SERVER', 'http://www.*****.com'); // eg, [url="http://localhost"]http://localhost[/url] - should not be empty for productive servers
 define('HTTPS_SERVER', 'https://www.*****.com'); // eg, [url="https://localhost"]https://localhost[/url] - should not be empty for productive servers
 define('ENABLE_SSL', true); // secure webserver for checkout procedure?
 define('HTTP_COOKIE_DOMAIN', 'www.*****.com');
 define('HTTPS_COOKIE_DOMAIN', 'www.*****.com');
 define('HTTP_COOKIE_PATH', '/');
 define('HTTPS_COOKIE_PATH', '/');
 define('DIR_WS_HTTP_CATALOG', '/');
 define('DIR_WS_HTTPS_CATALOG', '/');
 define('DIR_WS_IMAGES', 'images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
 define('DIR_FS_CATALOG', '/home/httpd/vhosts/www.*****.com/httpdocs/');
 define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
 define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

// define our database connection
 define('DB_SERVER', 'www.*****.com'); // eg, localhost - should not be empty for productive servers
 define('DB_SERVER_USERNAME', '******');
 define('DB_SERVER_PASSWORD', '******');
 define('DB_DATABASE', '******');
 define('USE_PCONNECT', 'false'); // use persistent connections?
 define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'

 

 

Replacing the code

'HTTPS_SERVER', 'https://www.*****.com'

with

'HTTPS_SERVER', 'http://www.*****.com'

helps to solve the problem, but data on account etc. is not transferred via a secure connection which I want to avoid if possible. Just copying file like account.php from the non-SSL folder to the SSL folder doesn't help.

 

Does anybody have an idea what is going wrong and how I can resolve the problem in order to offer secure connection to customers for data which could be sensitive?

 

Many thanks for any help in advance

 

Maurizio

[♥Vger]

Unless you have purchased and installed a full ssl certificate then any ssl you may have for your website would be your hosts shared ssl.

 

You need to contact them and ask them if you have access to their shared ssl - and if so what is their shared ssl address.

 

Until then set enable_ssl to false.

 

Vger