Correctly configuring SSL security

[Guest]

I have been right through all 17 pages of the post at http://www.oscommerce.com/forums/index.php?showtopic=233458 and posted to it but not had any responses - so am back here please.............

 

I have a shop for which i have bought a ssl cert and it has been installed at www.gingerbay.co.uk. I would like to add ssl to all the data collection areas of my shop which i understand should be what happens when it is correctly configured.

 

the editing i have done so far (all gleaned from the above thread) has meant i have https:// throughout all my admin pages - which is just a bonus.

 

But it wont display properly in my shop pages - I can manually add the httpS:// and the pages display but without the images. But the pages should display as https automatically like so many other great shops i have seen through this forum.

 

I have followed all the suggestions and below are my configure.php file areas that i believe are relevant. if anyone would like anything else please ask - i have been on it for 2 days so far !!

 

many thanks for looking.

Richard

 

from CATALOG/ADMIN/INCLUDES/

 

define('HTTP_SERVER', 'https://www.gingerbay.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTP_CATALOG_SERVER', 'https://www.gingerbay.co.uk');

define('HTTPS_CATALOG_SERVER', 'https://www.gingerbay.co.uk');

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

define('DIR_FS_DOCUMENT_ROOT', '/hsphere/local/home/royalnor/gingerbay.co.uk/catalog/'); // where the pages are located on the server

 

 

from CATALOG/INCLUDES/

 

define('HTTP_SERVER', 'http://www.gingerbay.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://www.gingerbay.co.uk'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'http://www.gingerbay.co.uk');

define('HTTPS_COOKIE_DOMAIN', 'https://www.gingerbay.co.uk');

define('HTTP_COOKIE_PATH', 'http://www.gingerbay.co.uk');

define('HTTPS_COOKIE_PATH', 'https://www.gingerbay.co.uk');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/');

[Jack_mcs]

Try changing these

define('HTTP_COOKIE_DOMAIN', 'http://www.gingerbay.co.uk');
define('HTTPS_COOKIE_DOMAIN', 'https://www.gingerbay.co.uk');
define('HTTP_COOKIE_PATH', 'http://www.gingerbay.co.uk');
define('HTTPS_COOKIE_PATH', 'https://www.gingerbay.co.uk');
define('DIR_WS_HTTP_CATALOG', '/catalog/');
define('DIR_WS_HTTPS_CATALOG', '/');

to these

define('HTTP_COOKIE_DOMAIN', '.www.gingerbay.co.uk');
define('HTTPS_COOKIE_DOMAIN', '.www.gingerbay.co.uk');
define('HTTP_COOKIE_PATH', '/catalog/');
define('HTTPS_COOKIE_PATH', '/catalog/');
define('DIR_WS_HTTP_CATALOG', '/catalog/');
define('DIR_WS_HTTPS_CATALOG', '/catalog/');

 

Jack

[Guest]

Jack.

thanks for your help - tried that - doesnt make any difference.

 

My host has suggested adding the following to the .htaccess file would give me https on the entire site:

RewriteEngine On

RewriteCond %{SERVER_PORT} !443

RewriteRule (.*) https://exampledomain.com/ [R]

 

which is an option i suppose - the odd thing is i cant see the .htaccess file now that ssl has been installed ??

 

thanks for help

Richard

[Jack_mcs]

Your host may be using a non-standard port. This thread should help.

 

Jack

[Guest]

Your host may be using a non-standard port. This thread should help.

 

Jack

 

thanks again - i have tried that post but cant configure this line properly, im sorry i am new to this but learning fast-ish!

 

https://ssl.shared.com/www.gingerbay.co.uk/myenv.php what goes in the ssl.shared.com bit ? the certificate is issued by comodo.com is that what is meant ?

sorry if im being thick here !

cheers

Richard

[Guest]

JUst for info of anyone coming to this thread looking for help i have got it working to a fashion by forcing the httpS with an .htaccess file as suggested in a few places on here.

 

just add this

 

RewriteEngine On

RewriteCond %{SERVER_PORT} 80

RewriteRule ^(.*)$ https://www.example.com/$1 [R,L]

 

and it works fine

 

many thanks to all that have helped

Richard

[juwoko]

JUst for info of anyone coming to this thread looking for help i have got it working to a fashion by forcing the httpS with an .htaccess file as suggested in a few places on here.

 

just add this

 

RewriteEngine On

RewriteCond %{SERVER_PORT} 80

RewriteRule ^(.*)$ https://www.example.com/$1 [R,L]

 

and it works fine

 

many thanks to all that have helped

Richard

 

Hi,

 

I'm facing the same problem, but this quoted change did also not help me.

 

myenv.php has shown this reply:

 

HTTP HOST: emceramic.org

Server Port: 80

SSL Status:

Fowarded Server:

Fowarded Host:

Fowarded By:

 

Why does it not answer anything to SSL Status? and the others?

 

Just don't get any clue.

 

Juergen

[germ]

If you're on a Windows server, look thru this:

 

Click Me