Setting Up SSL (checkout only)

[Rwfresh]

Hi All,

 

Can someone point in the right direction? I've got a few stores running right now. I need to secure the checkout. Does OSC by default only secure the checkout or is the whole store need to be secure? I am using MS2.2 . Thanks!

 

rw

[chfields]

Your config files should look similar to what mine do for SSL

 

Catalog

define('HTTP_SERVER', 'http://www.mrsfieldsgoodies.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://host73.ipowerweb.com/~mrsfield'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.mrsfieldsgoodies.com');

define('HTTPS_COOKIE_DOMAIN', 'https://host73.ipowerweb.com/~mrsfield');

define('HTTP_COOKIE_PATH', 'http://www.mrsfieldsgoodies.com/');

define('HTTPS_COOKIE_PATH', 'https://host73.ipowerweb.com/~mrsfield/');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '/');

 

admin

define('HTTP_SERVER', 'http://www.mrsfieldsgoodies.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTP_CATALOG_SERVER', 'http://www.mrsfieldsgoodies.com');

define('HTTPS_CATALOG_SERVER', 'https://host73.ipowerweb.com');

define('ENABLE_SSL_CATALOG', 'false'); // secure webserver for catalog module

define('DIR_FS_DOCUMENT_ROOT', '/home/~mrsfield/public_html/'); // where the pages are located on the server

define('DIR_WS_ADMIN', '/admin/'); // absolute path required

define('DIR_FS_ADMIN', '/home/~mrsfield/public_html/admin/'); // absolute pate required

define('DIR_WS_CATALOG', '/'); // absolute path required

define('DIR_FS_CATALOG', '/home/~mrsfield/public_html/'); // absolute path required

[Rwfresh]

Hi,

 

Thanks for the response. Just a few questions. Your catalog remains in your webroot? What if you have your own certificate? What exactly is happening in this scenario when you use the URL that you are using (poweweb one)? Are people redirected to that URL? Is it in fact the same location as your webroot? Thanks for your help!

 

rw