SSl Help

[aliharis2004]

I have installed SSL on my server and I can view my site if I type https://mosaicartkeepsakes.com/catalog ...

 

Now, I am trying to enable the https for the checkout procedure for which I have changed both my configure.php but it doesnot seem to work ...

 

Here is what my config file looks like :

 

Can somebody tell me what i might be doing wrong ....

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://mosaicartkeepsakes.com/'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://mosaicartkeepsakes.com/'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'http://mosaicartkeepsakes.com/');

define('HTTPS_COOKIE_DOMAIN', 'https://mosaicartkeepsakes.com/');

define('HTTP_COOKIE_PATH', 'http://mosaicartkeepsakes.com');

define('HTTPS_COOKIE_PATH', 'https://mosaicartkeepsakes.com');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME/']));

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

define('DB_SERVER', ''); // eg, localhost - should not be empty for productive servers

define('DB_SERVER_USERNAME', '');

define('DB_SERVER_PASSWORD', '');

define('DB_DATABASE', 'osCommerce');

define('USE_PCONNECT', 'false'); // use persistent connections?

define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');

define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);

 

?>

[Scurry]

What doesn't work about it?

[aliharis2004]

The checkout process still goes through http://

[Guest]

define('HTTP_SERVER', 'http://mosaicartkeepsakes.com/'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://mosaicartkeepsakes.com/'); // eg, https://localhost - should not be empty for productive servers

 

Remove the forward slash after the .com

[aliharis2004]

THanks Melinda .. I tried removing the / but it still no change, here is what it looks like after the change:

 

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'https://mosaicartkeepsakes.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://mosaicartkeepsakes.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'http://mosaicartkeepsakes.com');

define('HTTPS_COOKIE_DOMAIN', 'https://mosaicartkeepsakes.com');

define('HTTP_COOKIE_PATH', 'http://mosaicartkeepsakes.com');

define('HTTPS_COOKIE_PATH', 'https://mosaicartkeepsakes.com');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME/']));

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

define('DB_SERVER', ''); // eg, localhost - should not be empty for productive servers

define('DB_SERVER_USERNAME', '');

define('DB_SERVER_PASSWORD', '');

define('DB_DATABASE', 'osCommerce');

define('USE_PCONNECT', 'false'); // use persistent connections?

define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');

define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);

 

?>

[Guest]

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://mosaicartkeepsakes.com');

define('HTTPS_SERVER', 'https://mosaicartkeepsakes.com');

define('ENABLE_SSL', true);

define('HTTP_COOKIE_DOMAIN', '.mosaicartkeepsakes.com');

define('HTTPS_COOKIE_DOMAIN', '.mosaicartkeepsakes.com');

define('HTTP_COOKIE_PATH', '/.mosaicartkeepsakes.com/');

define('HTTPS_COOKIE_PATH', '/.mosaicartkeepsakes.com/');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

[lurker]

You probably know this but there are two configure.php's

 

one in /catalog/admin/includes and one in /catalog/includes

 

Have you configured both of them?

[Guest]

Hi,

 

I saw this post and am having the same problem, I don't have an ssl set up yet but was assuming that by enabling it and providing a fake ssl address I would be able to tell if the 'enable_ssl' was working or not by the fact that it would not bring up the ssl page because it does't exist.

 

Have changed both configure files in catalog and admin but whenever I go to checkout there isn't a sniff of it trying to find or go to the https:// file I have specified.

 

Maybe there is an automatic check to see if the https:// address exists and if it doesn't it redirects to the http: one, I don't know.

 

/* ADMIN CONFIGURE FILE */

  define('HTTP_SERVER', 'http://localhost/oscommerce'); // eg, http://localhost or - https://localhost should not be NULL for productive servers
 define('HTTP_CATALOG_SERVER', 'http://localhost/oscommerce');
 define('HTTPS_CATALOG_SERVER', 'https://localhost/oscommerce');
 define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

 

/*CATALOG CONFIGURE FILE*/

  define('HTTP_SERVER', 'http://localhost/oscommerce/'); // eg, http://localhost - should not be empty for productive servers
 define('HTTPS_SERVER', 'https://localhost/oscommerce/'); // eg, https://localhost - should not be empty for productive servers
 define('ENABLE_SSL', true); // secure webserver for checkout procedure?

 

Did you manage to get yours working aliharis2004?

 

Thanks

 

Euan

[yoko]

For all of you with shared SSL, take a look at this forum, maybe the change suggested by iiinetworks could help you, too:

topic

 

Here it is:

Another potential problem. Perhaps you should try changing (around line 45 of includes/functions/html_output.php)

if ( ($add_session_id == true) && ($session_started == true) && (SESSION_FORCE_COOKIE_USE == 'False') ) {

to

if ( ($add_session_id == true) && ($session_started == true) ) {

[aliharis2004]

I am not sure, how SSL works because I reinstalled SSL again and its working now (YIPEE) but the funny thing is that I have put the orignal config file without changing any parameter, it has

 

define('ENABLE_SSL', false);

 

and the the checkout goes through https ..... any comments, why is that

 

You can view the site at http://www.mosaicartkeepsakes.com/catalog/index.php

 

Thanks

[Guest]

Cheers for the reply there,

 

I am just in the middle of setting up an ssl certificate and hosting for the site I am going to have this oscommerce shopping cart on. I have a question about the need for a secure server though.

 

If I am only using third party payment gateways such as PayPal and AUTHORIZE though is there a need for an ssl on the website? Does the ssl for the payment gateway that the user chooses not negate the need for the ssl on my website? Or is the ssl required to prevent the user's actual order details being compromised?

 

Any thoughts?

 

Cheers

 

Euan

[matarali]

Authorizenet told me that their gateway will not work if you DO NOT have SSL installed on your site.

[Guest]

define('HTTP_SERVER', 'http://localhost/oscommerce/'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://localhost/oscommerce/

 

You need to remove the forward slash after oscommerce.

 

This is not installed this way. Are you installing it or just filling in the fields?

[maeve]

Authorizenet told me that their gateway will not work if you DO NOT have SSL installed on your site.

Hi,

 

Although it's not a good idea to use non-SSL site for a shopping cart, authorize.net works even if you are posting from a non-SSL site. Just put the userid, Transaction key on the payment module and enable production mode.

 

Maeve