Configure SSL, works in Firefox does'nt wotk with Internet Explorer

[balloons]

After building my site and asking on this forum I was told that I should get SSL to make my site secure. I purchased my SSL through the same company that I have my website hosted through but am having problems getting things to work. I have been in touch with them and they suggested these forums as a source of help which I was already doing anyway.

 

Anyway, after searching around I found something that said I should change false to true to get things working and this is highlighted below:

 

In order to configure OsCommerce to work with SSL please open the file public_html/catalog/includes/configure.php and make the following changes:

 

define('HTTP_SERVER', 'http://www.yourdomain.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://yourdomain.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.yourdomain.com');

define('HTTPS_COOKIE_DOMAIN', 'yourdomain.com');

define('HTTP_COOKIE_PATH', '/catalog/');

define('HTTPS_COOKIE_PATH', '/catalog/');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

 

Similar to the above changes have to be made in the file public_html/catalog/admin/includes/configure.php which is responsible for the admin area configurations.

 

I have made the changes to the both files and thigs are a bit awry!

 

When I go to my site using Firefox things work ok and when I go to my account in Firefox it takes me to https: so I know it is secure and everything looks to be working ok. However, when I go to my site using internet explorer everything looks ok but when I go to my account it says there is a problem with the sites security certificate and that the security certificate presented by this site was issued for a different websites address?

 

I am really not sure as to what is going wrong and what needs to be done to get things working as I dont understand how Firefox works great but internet explorer goes wrong?

 

Any help would really be appreciated as this is the last hurdle I have to finish before I start giving out my cards.

 

Cheers.

[Jack_mcs]

Please post your includes/configure.php file, without the database login information.

 

Jack

[balloons]

Here is the includes/configure.php file without the database login info.

 

 

<?php

/*

$Id: configure.php,v 1.14 2003/07/09 01:15:48 hpdl Exp $

 

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://twilightballoons.co.uk/osc'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://twilightballoons.co.uk/osc'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'twilightballoons.co.uk');

define('HTTPS_COOKIE_DOMAIN', 'twilightballoons.co.uk');

define('HTTP_COOKIE_PATH', '/osc/');

define('HTTPS_COOKIE_PATH', '/osc/');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/');

 

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers

define('DB_SERVER_USERNAME', '');

define('DB_SERVER_PASSWORD', 'mWR1l_z5WR');

define('DB_DATABASE', '');

define('DB_TABLE_PREFIX', 'osc8_');

define('USE_PCONNECT', 'false'); // use persistent connections?

define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

?>

[Jack_mcs]

Try changing these lines

define('HTTP_SERVER', 'http://twilightballoons.co.uk/osc'); // eg, http://localhost - should not be empty for productive servers
define('HTTPS_SERVER', 'https://twilightballoons.co.uk/osc'); // eg, https://localhost - should not be empty for productive servers
define('ENABLE_SSL', true); // secure webserver for checkout procedure?
define('HTTP_COOKIE_DOMAIN', 'twilightballoons.co.uk');
define('HTTPS_COOKIE_DOMAIN', 'twilightballoons.co.uk');
define('HTTP_COOKIE_PATH', '/osc/');
define('HTTPS_COOKIE_PATH', '/osc/');
define('DIR_WS_HTTP_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

 

to these

 

define('HTTP_SERVER', 'http://twilightballoons.co.uk'); // eg, http://localhost - should not be empty for productive servers
define('HTTPS_SERVER', 'https://twilightballoons.co.uk'); // eg, https://localhost - should not be empty for productive servers
define('ENABLE_SSL', true); // secure webserver for checkout procedure?
define('HTTP_COOKIE_DOMAIN', '.twilightballoons.co.uk');
define('HTTPS_COOKIE_DOMAIN', '.twilightballoons.co.uk');
define('HTTP_COOKIE_PATH', '/osc/');
define('HTTPS_COOKIE_PATH', '/osc/');
define('DIR_WS_HTTP_CATALOG', '/'osc.);
define('DIR_WS_HTTPS_CATALOG', '/osc/');

 

This will work for the ssl cert twilightballoons.co.uk, not www.twilightballoons.co.uk. If your cert is for www.twilightballoons.co.uk, you will need to change the https entries to reflect that.

 

Jack

[balloons]

Cheers for the help Jack I have now got things working!

 

When I use Firefox and click on my account it takes me to https: so I know it is secure to login and fine and now when I go to my account using internet explorer it takes me to https: so I know that is secure too!

 

If you want to take a look at the site the address is: Twilight Balloons