shared ssl on hostgator

[vandul]

I moved an oscommerce installation to a new server and configured it for a new database and to use the hostgator shared ssl server

The problem is that when I click on an oscommerce option it goes to the url of the secure server and then nothing will work from that url.

the site is www.oxyultra.com if you click on mi cuenta and look at the address bar you will see the url and the problem i am having

 

 

is it a problem with the cookie configuration?

do i have my site configured incorrectly?

do i need dedicated ssl?

do i need a dedicated ip?

also i dont know where the file is in oscommerce that contains the encryption key

 

any help is much appreciated, this problem has been a pain in my side for a while

[lindsayanng]

we can not know if you dont what your files or set up as. You can post your configure files, just DO NOT post your database info. it can be used by hackers..

 

you do NOT need to have dedicated SSL.. you ask have no force cookies. I just learned that you can not use a cookie in a shared SSL environment because its a differnt url

[germ]

Shared SSL and osC can be quite a challenge.

 

osC isn't picking up the queue from the server that SSL is on.

 

You'll probably have to do something in application_top.php here:

 

// set the type of request (secure or not)
 $request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';

Many times that SSL test won't work in a shared SSL environment.

:(

[germ]

Copy the text in the CODE box below into a text editor (Notepad) on your PC:

 

<?php
echo 'HTTP HOST: ' . "$HTTP_HOST";
echo '<br>Server Port: ' . getenv('SERVER_PORT');
echo '<br>SSL Status: ' . getenv('HTTPS');
echo '<br>Fowarded Server: ' . getenv('HTTP_X_FORWARDED_SERVER');
echo '<br>Fowarded Host: ' . getenv('HTTP_X_FORWARDED_HOST');
echo '<br>Fowarded By: ' . getenv('HTTP_X_FORWARDED_BY');
?>

Save it as myenv.php

 

Upload it into the root folder of your site.

 

Access it with the link below:

 

Secure link to myenv.php

 

You MUST access it with the link above for this to present any useful information.

 

The script will output some text to your browser.

 

Copy/paste it into your next post.

[vandul]

here is part of the config file, so if i got dedicated ssl i would just change the https server and it should work fine?

 

define('HTTP_SERVER', 'http://www.oxyultra.com'); // eg, http://localhost - should not be empty for productive servers

 define('HTTPS_SERVER', 'https://gator550.hostgator.com/~richa123/'); // eg, https://localhost - should not be empty for productive servers

 define('ENABLE_SSL', true); // secure webserver for checkout procedure?

 define('HTTP_COOKIE_DOMAIN', 'www.oxyultra.com');

 define('HTTPS_COOKIE_DOMAIN', '');

 define('HTTP_COOKIE_PATH', '/');

 define('HTTPS_COOKIE_PATH', '');

 define('DIR_WS_HTTP_CATALOG', '/');

 define('DIR_WS_HTTPS_CATALOG', '');

[germ]

I slipped a post in on you.

 

Try it please.

;)

 

here is part of the config file, so if i got dedicated ssl i would just change the https server and it should work fine?

Dedicated SSL may be easier to live with, but if you got it your config file would need changing.

[germ]

And these need changed:

 

  define('HTTPS_COOKIE_DOMAIN', '.gator550.hostgator.com');

 define('HTTPS_COOKIE_PATH', '/');

 define('DIR_WS_HTTPS_CATALOG', '/');

[vandul]

i uploaded the file but it only told me this

 

HTTP HOST: gator550.hostgator.com

Server Port: 80

SSL Status:

Fowarded Server:

Fowarded Host:

Fowarded By:

[germ]

In /includes/application_top.php finde this code:

 

// set the type of request (secure or not)
 $request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';

Change it to:

 

// set the type of request (secure or not)
//  $request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';
 $request_type = ( $HTTP_HOST == 'gator550.hostgator.com' ) ? 'SSL' : 'NONSSL';

MAKE A BACKUP BEFORE MAKING ANY EDITS.

 

I think that will fix the SSL problem.

[germ]

I missed one:

 

This

 

  define('HTTPS_SERVER', 'https://gator550.hostgator.com/~richa123/');

should be:

 

  define('HTTPS_SERVER', 'https://gator550.hostgator.com/~richa123');

[vandul]

thanks for the help! that did allow the links to function but some images aren't showing up

do you know of a way to mask the url? i wish i could just use a subdomain to redirect to it

 

i just noticed that once you get into the protected page some links that need to be linked to oxyultra.com don't work, i'll have to change those to the full filepath

i'm probably going to get the dedicated ssl and reconfigure the site, i just have a feeling there's something i'm missing and i'll have something new to fix after that

[germ]

I'm looking into the image problem.

 

I'll post again when I think I have a solution.

 

Hopefully not too long.

:lol:

 

i just noticed that once you get into the protected page some links that need to be linked to oxyultra.com don't work, i'll have to change those to the full filepath

i'm probably going to get the dedicated ssl and reconfigure the site, i just have a feeling there's something i'm missing and i'll have something new to fix after that

To be blunt as a spoon: Your template has some "less than desirable" code in it.

:blush:

[germ]

Your template needs a lot of work.

:blush:

 

An example to get the images working, take the store logo.

 

In SSL mode, the URL to it is this:

 

https://gator550.hostgator.com/templates/7348/images/Untitled-1_01.gif

It needs to be:

 

https://gator550.hostgator.com/~richa123/templates/7348/images/Untitled-1_01.gif

Use this as an example to fix the others.

[vandul]

Your template needs a lot of work.

:blush:

 

An example to get the images working, take the store logo.

 

In SSL mode, the URL to it is this:

 

https://gator550.hostgator.com/templates/7348/images/Untitled-1_01.gif

It needs to be:

 

https://gator550.hostgator.com/~richa123/templates/7348/images/Untitled-1_01.gif

Use this as an example to fix the others.

thanks! i'll give that a shot before I order the ssl

someone else designed the template, i noticed immediately that the template wasnt right because it doesnt display correctly in some browsers,

my job is to get the script up and running on the new server

[germ]

thanks! i'll give that a shot before I order the ssl

If you go to dedicated SSL your configure file will need changed again.

 

I just want that to be clear.

:)

[frimipiso]

Thanks for this great hint!

That immediately solved my problems!

 

Cheers,

 

Jens

[amk2010]

Well thats nice.Very useful thread buddy. It will be very helpful.

[troubleshooter2000]

Hello Jim:

I am having a similar issue with shared SSL after I switched from ipage to dollar2host. As per your posting above, I also created myenv.php and put it into my root. But when I type in https://.../myenv.php, then I get internet explore page not found. Same goes for any other secure page that I try to access. Does this mean the shared SSL server is not really pointing to my root? My host is saying that it does.

 

Thanks in advance...

[germ]

The myenv.php should be accessed with an HTTP prefix, NOT HTTPS

 

Does that make a diiff?

:unsure:

[troubleshooter2000]

Just tried that with http. Now I am getting "404 Page Not Found:". Does this mean that the path I am given for https by the host is incorrect or not active? Thanks.

[troubleshooter2000]

If I just typed in http://domainname.com/~username/, it does correctly bring up the default index.php. It also bring up http://domainname.com/~username/faq.php to give you another example.

 

But myenv.php which is located in the same folder as index.php and faq.php, shows page not found using http://domainname.com/~username/myenv.php

[troubleshooter2000]

I just got an email from my host telling me that they actually do not have shared SSL installed in this server. So they are in process of having that set up. I suppose that should take care of this. Thanks for your help.

[germ]

You need to put the file in the same folder you have your store installed.

 

And access it with a HTTP url.

 

It displays HTTP variables in the main browser window.

 

HTTPS variables are shown in a popup window. You may have to turn off the browser popup blocker (if you have it on).

 

The only reasons I can think of for the "not found" error is you don't have the file in the correct place, or you're not accessing it with the proper URL.

[troubleshooter2000]

Hi Jim: Finally, the host has installed SSL and I am able to use it... But now when I switch from SSL to non SSL pages, the customer is automatically logged off. What could this be... Here's my configure.php.

/include/configure.php

 

<?php

define('HTTP_SERVER', 'http://www.domain.com');

define('HTTPS_SERVER', 'https://domain.com/~user');

define('ENABLE_SSL', true);

define('HTTP_COOKIE_DOMAIN', 'www.domain.com');

define('HTTPS_COOKIE_DOMAIN', domain.com/~user');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', '');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

define('DB_SERVER', '#########');

define('DB_SERVER_USERNAME', '#########);

define('DB_SERVER_PASSWORD', #########');

define('DB_DATABASE', '#########);

define('USE_PCONNECT', '#########');

define('STORE_SESSIONS', '#########');

?>

 

I have more issues with my admin page but I will bring that up after I get this one solved. Thanks very much in advance....

[germ]

Try this for the HTTPS_COOKIE_DOMAIN

 

define('HTTPS_COOKIE_DOMAIN', '.domain.com');