I bought a dedicated SSL cert from my ISP (1and1.com) and according to them it is installed correctly and working fine. I've changed the config.php file(s) and when I go to the account or checkout page, I do get the https:// prefix in the URL. However, no lock on the bottom of the page, and if I do a test login my browser advises me that I am about to send info over an unsecure connection!
My website is www.cubicdissection.com - click on the "puzles for sale" button.
HELP PLEASE! This is drivin' me nuts....
Latest News: (loading..)
SSL kicking my butt
Started by apriorius, Nov 26 2007, 06:23
10 replies to this topic
#1
Posted 26 November 2007, 06:23
#2
Posted 26 November 2007, 07:22
apriorius, on Nov 26 2007, 05:23 PM, said:
I bought a dedicated SSL cert from my ISP (1and1.com) and according to them it is installed correctly and working fine. I've changed the config.php file(s) and when I go to the account or checkout page, I do get the https:// prefix in the URL. However, no lock on the bottom of the page, and if I do a test login my browser advises me that I am about to send info over an unsecure connection!
My website is www.cubicdissection.com - click on the "puzles for sale" button.
HELP PLEASE! This is drivin' me nuts....
My website is www.cubicdissection.com - click on the "puzles for sale" button.
HELP PLEASE! This is drivin' me nuts....
The Coopco Underwear Shop
If you live to be 100 years of age, that means you have lived for 36,525 days. Don't waste another, there aren't many left.
#3
Posted 26 November 2007, 14:42
Coopco, on Nov 26 2007, 02:22 AM, said:
When it asks if you want to view insecure, say no. You will then see what is referenced from outside your domain.
Thanks for the reply. I think the SSL is actually working; when I click on the file properties it shows a secure page. However, for some reason my browser is not showing the lock on the bottom. It does when I go to other secure sites (like my bank for instance).
#4
Posted 26 November 2007, 14:51
apriorius, on Nov 27 2007, 01:42 AM, said:
Thanks for the reply. I think the SSL is actually working; when I click on the file properties it shows a secure page. However, for some reason my browser is not showing the lock on the bottom. It does when I go to other secure sites (like my bank for instance).
The Coopco Underwear Shop
If you live to be 100 years of age, that means you have lived for 36,525 days. Don't waste another, there aren't many left.
#5
Posted 26 November 2007, 16:03
The 'base href' of your site is showing as http:// on both http and htps pages. I do not know what is causing this problem - but it is the source of your difficulties.
Vger
Vger
#6
Posted 26 November 2007, 16:39
Vger, on Nov 26 2007, 11:03 AM, said:
The 'base href' of your site is showing as http:// on both http and htps pages. I do not know what is causing this problem - but it is the source of your difficulties.
Vger
Vger
Odd. I changed the configure.php to:
define('HTTP_SERVER', 'https://www.cubicdissection.com'); // eg, http://localhost - should not be empty for productive servers
define('HTTPS_SERVER', 'https://www.cubicdissection.com'); // eg, https://localhost - should not be empty for productive servers
And that fixed it. Very strange because I'm pretty sure the HTTP_SERVER should not have the s behind it. You would think that changing them both makes every page query to the https url, but it's working correctly in that only the checkout, account etc pages are coming up https. The catalog pages still come up http. Oh well, if it works it works.
#7
Posted 26 November 2007, 16:44
That is a 'work-around' to the problem but not the solution. Google doesn't give page rankings to https pages, so that is not a long-term solution.
It looks like a problem with the server configuration --> contact your hosts.
Vger
It looks like a problem with the server configuration --> contact your hosts.
Vger
#8
Posted 26 November 2007, 16:50
Oops sorry - didn't notice the piece of text about using 1and1 as your host.
This is the fix:
Vger
This is the fix:
Quote
find this line in your catalog/includes/application_top.php (around line 40)
$request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';
and change it to:
$request_type = (getenv('HTTPS') == '1') ? 'SSL' : 'NONSSL'
$request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';
and change it to:
$request_type = (getenv('HTTPS') == '1') ? 'SSL' : 'NONSSL'
Vger
#9
Posted 26 November 2007, 17:47
What about for those not on 1and1 but still having this issue?
SolarFrenzy
Solar powered gadgets at down to earth prices.
CheekyNaughty
Promoting British Design
Solar powered gadgets at down to earth prices.
CheekyNaughty
Promoting British Design
#11
Posted 27 November 2007, 04:14
Hello,
I'm having the same problem he was having - but I tried changing both of those lines in the configure.php to HTTPS and I tried replacing the line in application_top as you suggested; but neither of these worked. When you checkout, it still goes to HTTPS but doesn't show the lock or the certificate.
The url is http://www.centurapaint.com .
Thanks!
I'm having the same problem he was having - but I tried changing both of those lines in the configure.php to HTTPS and I tried replacing the line in application_top as you suggested; but neither of these worked. When you checkout, it still goes to HTTPS but doesn't show the lock or the certificate.
The url is http://www.centurapaint.com .
Thanks!














