Jump to content


Corporate Sponsors


Latest News: (loading..)

- - - - -

SSL kicking my butt


10 replies to this topic

#1 apriorius

  • Community Member
  • 37 posts
  • Real Name:No Thanks

Posted 26 November 2007, 06:23

I bought a dedicated SSL cert from my ISP (1and1.com) and according to them it is installed correctly and working fine. I've changed the config.php file(s) and when I go to the account or checkout page, I do get the https:// prefix in the URL. However, no lock on the bottom of the page, and if I do a test login my browser advises me that I am about to send info over an unsecure connection!

My website is www.cubicdissection.com - click on the "puzles for sale" button.

HELP PLEASE! This is drivin' me nuts....

#2 Coopco

  • Community Member
  • 9,557 posts
  • Real Name:Leslie Cooper
  • Gender:Male
  • Location:Sea Lake, Victoria, Australia

Posted 26 November 2007, 07:22

View Postapriorius, on Nov 26 2007, 05:23 PM, said:

I bought a dedicated SSL cert from my ISP (1and1.com) and according to them it is installed correctly and working fine. I've changed the config.php file(s) and when I go to the account or checkout page, I do get the https:// prefix in the URL. However, no lock on the bottom of the page, and if I do a test login my browser advises me that I am about to send info over an unsecure connection!

My website is www.cubicdissection.com - click on the "puzles for sale" button.

HELP PLEASE! This is drivin' me nuts....
When it asks if you want to view insecure, say no. You will then see what is referenced from outside your domain.


The Coopco Underwear Shop



If you live to be 100 years of age, that means you have lived for 36,525 days. Don't waste another, there aren't many left.

#3 apriorius

  • Community Member
  • 37 posts
  • Real Name:No Thanks

Posted 26 November 2007, 14:42

View PostCoopco, on Nov 26 2007, 02:22 AM, said:

When it asks if you want to view insecure, say no. You will then see what is referenced from outside your domain.

Thanks for the reply. I think the SSL is actually working; when I click on the file properties it shows a secure page. However, for some reason my browser is not showing the lock on the bottom. It does when I go to other secure sites (like my bank for instance).

#4 Coopco

  • Community Member
  • 9,557 posts
  • Real Name:Leslie Cooper
  • Gender:Male
  • Location:Sea Lake, Victoria, Australia

Posted 26 November 2007, 14:51

View Postapriorius, on Nov 27 2007, 01:42 AM, said:

Thanks for the reply. I think the SSL is actually working; when I click on the file properties it shows a secure page. However, for some reason my browser is not showing the lock on the bottom. It does when I go to other secure sites (like my bank for instance).
Well, if you did what was suggested, you would see what was not displayed and has to be fixed. Once this is done, the lock will appear.


The Coopco Underwear Shop



If you live to be 100 years of age, that means you have lived for 36,525 days. Don't waste another, there aren't many left.

#5 Vger

  • Community Member
  • 16,978 posts
  • Real Name:R Anthony
  • Gender:Not Telling

Posted 26 November 2007, 16:03

The 'base href' of your site is showing as http:// on both http and htps pages. I do not know what is causing this problem - but it is the source of your difficulties.

Vger

#6 apriorius

  • Community Member
  • 37 posts
  • Real Name:No Thanks

Posted 26 November 2007, 16:39

View PostVger, on Nov 26 2007, 11:03 AM, said:

The 'base href' of your site is showing as http:// on both http and htps pages. I do not know what is causing this problem - but it is the source of your difficulties.

Vger


Odd. I changed the configure.php to:

define('HTTP_SERVER', 'https://www.cubicdissection.com'); // eg, http://localhost - should not be empty for productive servers
define('HTTPS_SERVER', 'https://www.cubicdissection.com'); // eg, https://localhost - should not be empty for productive servers

And that fixed it. Very strange because I'm pretty sure the HTTP_SERVER should not have the s behind it. You would think that changing them both makes every page query to the https url, but it's working correctly in that only the checkout, account etc pages are coming up https. The catalog pages still come up http. Oh well, if it works it works.

#7 Vger

  • Community Member
  • 16,978 posts
  • Real Name:R Anthony
  • Gender:Not Telling

Posted 26 November 2007, 16:44

That is a 'work-around' to the problem but not the solution. Google doesn't give page rankings to https pages, so that is not a long-term solution.

It looks like a problem with the server configuration --> contact your hosts.

Vger

#8 Vger

  • Community Member
  • 16,978 posts
  • Real Name:R Anthony
  • Gender:Not Telling

Posted 26 November 2007, 16:50

Oops sorry - didn't notice the piece of text about using 1and1 as your host.

This is the fix:

Quote

find this line in your catalog/includes/application_top.php (around line 40)

$request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';

and change it to:

$request_type = (getenv('HTTPS') == '1') ? 'SSL' : 'NONSSL'

Vger

#9 digilee

  • Community Member
  • 594 posts
  • Real Name:Lee

Posted 26 November 2007, 17:47

What about for those not on 1and1 but still having this issue?
SolarFrenzy
Solar powered gadgets at down to earth prices.

CheekyNaughty
Promoting British Design

#10 Vger

  • Community Member
  • 16,978 posts
  • Real Name:R Anthony
  • Gender:Not Telling

Posted 26 November 2007, 18:03

If they are with a Reseller they may be on 1and1 without knowing it.

If they are hosted with someone else, like GoDaddy, they have similar problems.

Vger

View Postdigilee, on Nov 26 2007, 05:47 PM, said:

What about for those not on 1and1 but still having this issue?


#11 batteryxsnare

  • Community Member
  • 2 posts
  • Real Name:Jon

Posted 27 November 2007, 04:14

Hello,

I'm having the same problem he was having - but I tried changing both of those lines in the configure.php to HTTPS and I tried replacing the line in application_top as you suggested; but neither of these worked. When you checkout, it still goes to HTTPS but doesn't show the lock or the certificate.

The url is http://www.centurapaint.com .

Thanks!