Shared SSL Certificate Configuration

[seshalyn_pr]

Hi All:

 

I didn't know where to post this, their is an active post regarding ssl, but it's a tips and tricks, so didn't want to break the rules on that. So, I apologize if I have duplicated a topic.

 

I've decided to use my hosts shared ssl certificate, while I'm able to get my own, but I'm having 2 issues.

1) If I add a product to the cart, when I click Checkout, the cart is empty.

2) When entering the secure area, all images and logos are little red X's now.

My shop is Located Here

 

I've searched around, and have changed the configure.php to the different configurations that I have found along the way, but still having the same problem. The path info given by my host is:

 

To access any of your files through a SSL connection, use the following URL:

https://seshalyn.powweb.com/<anyfile>

... where <anyfile> is the name of any file in your web directory.

 

Files in subdirectories will work too. Just use

 

https://seshalyn.powweb.com/<directory>/<anyfile>

... where <directory> is the name of any subdirectory.

 

 

My configure.php catalog is:

 

<?php

define('HTTP_SERVER', 'http://fiestaseshalyn.com');

define('HTTPS_SERVER', 'https://seshalyn.powweb.com/');

define('ENABLE_SSL', true);

define('HTTP_COOKIE_DOMAIN', 'fiestaseshalyn.com');

define('HTTPS_COOKIE_DOMAIN', 'seshalyn.powweb.com' );

define('HTTP_COOKIE_PATH', '/shop/');

define('HTTPS_COOKIE_PATH', '/shop/');

define('DIR_WS_HTTP_CATALOG', '/shop/');

define('DIR_WS_HTTPS_CATALOG', '/shop/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

I tried using the path to the directory like this: define('HTTPS_SERVER', 'https://seshalyn.powweb.com/shop'); but that did not work at all.

 

Thanks in advance for any tips you can share regarding this issue!

 

Glenda

[germ]

define('HTTPS_SERVER', 'https://seshalyn.powweb.com/');

That line should be:

 

define('HTTPS_SERVER', 'https://seshalyn.powweb.com');

(Leave off the trailing slash)

[seshalyn_pr]

define('HTTPS_SERVER', 'https://seshalyn.powweb.com/');

That line should be:

 

define('HTTPS_SERVER', 'https://seshalyn.powweb.com');

(Leave off the trailing slash)

Helloooo Germ:

 

Boyyy, Am I happy to see you :D (just a little humor, I'm around these forums so much, sometimes I feel like I know people). Thanks for your prompt, reply. I took off the trailing slash, but it's still behaving the same way :(.

 

Is their anything else I could try?

 

Again many thanksss 4 your help!!!

 

Glenda

[germ]

Shared SSL and osC just don't want to play nice together sometimes...

>_<

 

Try changing these:

 

define('HTTP_COOKIE_DOMAIN', 'fiestaseshalyn.com');
define('HTTPS_COOKIE_DOMAIN', 'seshalyn.powweb.com');

TO:

 

define('HTTP_COOKIE_DOMAIN', '.fiestaseshalyn.com');
define('HTTPS_COOKIE_DOMAIN', '.seshalyn.powweb.com');

I added a period at the beginning if each.

[seshalyn_pr]

Shared SSL and osC just don't want to play nice together sometimes...

>_<

 

Try changing these:

 

define('HTTP_COOKIE_DOMAIN', 'fiestaseshalyn.com');
define('HTTPS_COOKIE_DOMAIN', 'seshalyn.powweb.com');

TO:

 

define('HTTP_COOKIE_DOMAIN', '.fiestaseshalyn.com');
define('HTTPS_COOKIE_DOMAIN', '.seshalyn.powweb.com');

I added a period at the beginning if each.

 

:'( I'm starting to thinks osC doesn't like to play with me either. Grrr, that did not work either; nada/ nothing. Should I be checking anything else, files things I've maybe messed up I dunno :blink:

 

thankssss

[germ]

:'( I'm starting to thinks osC doesn't like to play with me either. Grrr, that did not work either; nada/ nothing. Should I be checking anything else, files things I've maybe messed up I dunno :blink:

 

thankssss

There is a line in the config file close to the bottom:

 

  define('STORE_SESSIONS', 'mysql');

Be sure yours says that.

[seshalyn_pr]

Hey Germ:

 

I checked the line it does say 'mysql'

 

define('USE_PCONNECT', 'false');

define('STORE_SESSIONS', 'mysql');

?>

 

Hope i'm not bugging 2 much :blush:

[germ]

Hey Germ:

 

I checked the line it does say 'mysql'

 

define('USE_PCONNECT', 'false');

define('STORE_SESSIONS', 'mysql');

?>

 

Hope i'm not bugging 2 much :blush:

I'm out of ideas.

:blush:

 

Some people with shared SSL have no problems at all, and I've seen a few people that never did get it to work with their osC.

:'(

[seshalyn_pr]

I'm out of ideas.

:blush:

 

Some people with shared SSL have no problems at all, and I've seen a few people that never did get it to work with their osC.

:'(

>_< , I was looking over at the powweb forums, and they have done, exactly what you have told me to do, many have gotten it to work, oh well, guess not for me... guess I'll have to dig in my piggy bank to get my own :angry:

 

Thanksssss so much 4 your help & time!!! I am most grateful :thumbsup:

 

glenda

[Guest]

Glenda

 

Have you got shared SSL web space or are you just using a certificate?

Have you access to this domain via FTP - https://seshalyn.powweb.com/ ?

 

If so simply download your existing website and upload it to the https domain.

 

Its not the proper way to do it but you should find that it works.

 

You shouldnt need to upload your admin folder to the https part of the site just the rest of it

[seshalyn_pr]

Glenda

 

Have you got shared SSL web space or are you just using a certificate?

Have you access to this domain via FTP - https://seshalyn.powweb.com/ ?

 

If so simply download your existing website and upload it to the https domain.

 

Its not the proper way to do it but you should find that it works.

 

You shouldnt need to upload your admin folder to the https part of the site just the rest of it

Hello matthell:

 

I checked my ftp, but I only have ftp acces to the main or non secure areas of the site. Thanksss for your help :) I really appreciate it.

glenda

[Jack_mcs]

On many hosts, to use the shared ssl you have to include your username, like

https://seshalyn.powweb.com/~username/

You may want to check with your host to be sure of the correct syntax.

[seshalyn_pr]

On many hosts, to use the shared ssl you have to include your username, like

https://seshalyn.powweb.com/~username/

You may want to check with your host to be sure of the correct syntax.

Hello Jack:

 

I checked with the host, but the path is simply https//seshalyn.powweb.com, I still tried it with the username like you suggested, just in case, but... no luck >_< ...

 

Thanks so much for your help,

Glenda

[Jack_mcs]

I don't have any other suggestions other than it is probably a permissions setting on the server. Your host really should be the one fixing this. As a different approach, do you realize that a private cert from godaddy is just $15/year? You would have to pay for a private IP, if needed, but that shouldn't be more than a $1 or $2 a month. I realize new shops may not generate enough income to cover such a cost but if you can't get the shared one working, it is an option.

[seshalyn_pr]

I don't have any other suggestions other than it is probably a permissions setting on the server. Your host really should be the one fixing this. As a different approach, do you realize that a private cert from godaddy is just $15/year? You would have to pay for a private IP, if needed, but that shouldn't be more than a $1 or $2 a month. I realize new shops may not generate enough income to cover such a cost but if you can't get the shared one working, it is an option.

Hey Jack:

 

I will check with the host to see what the deal is with the permissions. I saw the godaddy ssl's and was pretty excited with their prices, the thing is my host won't allow third party ssl certificates, unless it's the one that they offer in conjunction with geo trust. That one is about $50.00 for a year, not bad, so I'm considering it before I go completely live with my shop. I know it's important to be able to offer customers security with their info, hopefully I will be able to do it. Once again thanks :), you've been very helpful.

 

Glenda

[seshalyn_pr]

Well well well, I'm researching this topic again. I kind of gave up for a minute, but, it seems like I'm getting closer. I got one of my problems resolved, which was the hideous little red X's. I had hotlinking protection enabled, when I disabled it, it went into ssl, beautifully (w00t) . I can see all the graphics now. My second problem however, losing the contents of the shopping cart, is still there :'( . Does anyone know if it could have anything to do with the shopping_cart.php file??? Maybe I messed something up in there... Thanks All!!!

 

Glenda

[MrPhil]

If it's a shared certificate, the usual URL to get to the page is https://SERVERNAME.HOSTNAME.com/~ACCOUNTNAME, e.g., https://seshalyn.powweb.com/~fiestas02 . Check with your hosting service for the exact format to use. The certificate should have been issued for domain "seshalyn.powwweb.com", or possibly with a wildcard: "*.powweb.com". Only your host can tell you. Also ask them if their shared SSL certificate will work with a PHP application -- some won't.

 

For your hotlink protection problem, edit your .htaccess file to make sure that your domain name is included in the "whitelist" of domains allowed to see images. You have to have an exact match: www.mydomain.com and mydomain.com are different, and only one will match. Don't forget subdomains too -- they need to be explicitly listed.

[seshalyn_pr]

Well well well, I'm researching this topic again. I kind of gave up for a minute, but, it seems like I'm getting closer. I got one of my problems resolved, which was the hideous little red X's. I had hotlinking protection enabled, when I disabled it, it went into ssl, beautifully (w00t) . I can see all the graphics now. My second problem however, losing the contents of the shopping cart, is still there :'( . Does anyone know if it could have anything to do with the shopping_cart.php file??? Maybe I messed something up in there... Thanks All!!!

 

Glenda

Don't know if it makes any difference, but everything under the account is working also, account details, order history etc. Also the cart contents is there, it's when I click checkout, then I get a message "your shopping cart is empty" :blink:

[seshalyn_pr]

If it's a shared certificate, the usual URL to get to the page is https://SERVERNAME.HOSTNAME.com/~ACCOUNTNAME, e.g., https://seshalyn.powweb.com/~fiestas02 . Check with your hosting service for the exact format to use. The certificate should have been issued for domain "seshalyn.powwweb.com", or possibly with a wildcard: "*.powweb.com". Only your host can tell you. Also ask them if their shared SSL certificate will work with a PHP application -- some won't.

 

For your hotlink protection problem, edit your .htaccess file to make sure that your domain name is included in the "whitelist" of domains allowed to see images. You have to have an exact match: www.mydomain.com and mydomain.com are different, and only one will match. Don't forget subdomains too -- they need to be explicitly listed.

Hi Mr. Phil:

 

I will check on both suggestions. Thanks for your help :)

 

Glenda

[seshalyn_pr]

If it's a shared certificate, the usual URL to get to the page is https://SERVERNAME.HOSTNAME.com/~ACCOUNTNAME, e.g., https://seshalyn.powweb.com/~fiestas02 . Check with your hosting service for the exact format to use. The certificate should have been issued for domain "seshalyn.powwweb.com", or possibly with a wildcard: "*.powweb.com". Only your host can tell you. Also ask them if their shared SSL certificate will work with a PHP application -- some won't.

 

For your hotlink protection problem, edit your .htaccess file to make sure that your domain name is included in the "whitelist" of domains allowed to see images. You have to have an exact match: www.mydomain.com and mydomain.com are different, and only one will match. Don't forget subdomains too -- they need to be explicitly listed.

Hello:

 

Thanks for your suggestions Mr. PHil, I went over to my hosting service, asked for the url, and they basically gave me the same one, adding that they do not offer support for Oscommerce, after it is installed :-" , kind of knew they were going to say that. As far as the hotlinking I will set it up as you suggested. Thanks for your help once again!!!

 

glenda

[seshalyn_pr]

Helloooooo Everyone :rolleyes:

 

Ummm just wanted to ask, if anyone has any idea, where in the world is it that I lose the SSL CART. I'll explain a little. Since my first post, I've had to restart my site about umm, well several times. I noticed in the beginning, the shared ssl works perfectly, with the suggestions given to me on this post. However, when I continue to add the different contributions that I have installed, if I introduce any little error It's bye bye ssl cart again. For example, I had to contributions that were conflicting, and the shopping cart problem started again. Even after I removed the contribution that was causing the conflict, I lost the ssl cart contents forever. I actually tried to start over several times, with the hope that I wouldn't do anything to cause any errors, but reallyyyyyyy difficult.

 

On this site teststore, the ssl works fine, I have it set up with the shared ssl, and I don't lose the cart contents. So, the question is, where is it that I lose the ssl cart? When I introduce an error? When I backup database? Anyone have any ideas?

 

Thanks in advance,

Glenda

[BryceJr]

When installing addons, install one at a time and test your website prior to installing the next one.

 

On this site teststore, the ssl works fine, I have it set up with the shared ssl, and I don't lose the cart contents.

What are you doing right with "/teststore/" that wasn't in "/shop/"?

 

"/teststore/" is working but "/shop/" is not. What is the difference?

 

Observations:

 

1. In your "/shop/", your configure.php is missing the "https server" and "https cookie domain" but not in "/teststore/".

 

2. I don't see session IDs in your "/shop/" even when it seems "Force Cookie Use" is disabled. Session IDs are apparent in "/teststore/".

[seshalyn_pr]

When installing addons, install one at a time and test your website prior to installing the next one.

 

 

What are you doing right with "/teststore/" that wasn't in "/shop/"?

 

"/teststore/" is working but "/shop/" is not. What is the difference?

 

Observations:

 

1. In your "/shop/", your configure.php is missing the "https server" and "https cookie domain" but not in "/teststore/".

 

2. I don't see session IDs in your "/shop/" even when it seems "Force Cookie Use" is disabled. Session IDs are apparent in "/teststore/".

hello bryce:

 

Thank you for your response. I actually have the ssl on false on shop right now, sorry bout that. The configure.php does have the https server and https cookie domain listed. I'm thinking I must of introduced some error to lose the session Id now :'( , I do have Force Cookie Use, disabled, since it's a shared ssl. I have recreate sessions set to true. Does this mean I did in fact lose the oscSid somewhere???

 

Glenda

[seshalyn_pr]

hello bryce:

 

Thank you for your response. I actually have the ssl on false on shop right now, sorry bout that. The configure.php does have the https server and https cookie domain listed. I'm thinking I must of introduced some error to lose the session Id now :'( , I do have Force Cookie Use, disabled, since it's a shared ssl. I have recreate sessions set to true. Does this mean I did in fact lose the oscSid somewhere???

 

Glenda

If I have to restart this again!!! >_< I will definitely do the testing thoroughly after each add on. Thanks for the suggestion.

[seshalyn_pr]

If I have to restart this again!!! >_< I will definitely do the testing thoroughly after each add on. Thanks for the suggestion.

Well,

 

Just to update on my SSL Woes. I started my site over, added my contributions, one by one, backed up database, zipped entire store files after each one, tested after each one. Everything working sweet (or so I thought), retired for the day...

 

Next day: re~assumed my site construction tasks. First thing I did: Test the ssl shopping cart~ Result: Your shopping Cart is empty :lol: I mean at this point, I'm just going to laugh it off. I know I'm not crazy, and with all of the frustration that I've gone through with this issue, I have been extra cautious.

 

Anyways, I'm giving up on it for now~ AGAIN, until I see something that kind of shows light at the end of the tunnel, and I'll start with my fuss again.

 

Thanks to all who have tried to help. You have been very generous to share ur time and suggestions with me :thumbsup:

 

Glenda