SSL Authentication

[RobReynolds]

Can someone explain to me how to authenticate my SSL certificate in my file manager so that when you visit the site it shows the https:// before my main url? I have Cpanel hosting on a linux server and I'm running Os Commerce 2.3.4.  I know very little but I do know where the pub html files and others are. I just don't know where to change the files or which ones to change. I was told by hosting that it would be fairly simple for even me to do with the right guidance but they could not do it for me on their end. The cert. is already active but does not show up when you visit the site. If any more info is needed, please shoot me an email I would greatly appreciate the help. I installed this platform by myself without any prior I.T. skills but it seems to work just fine. I'm a newbie at this so don't laugh too hard please, just offer some insight if you can.

 

Thanks,

 

Rob Reynolds

[email protected]

[allaboutwicker]

Hi @@RobReynolds I believe you need to go into your "includes/configure.php file and put the correct url in as follows:

 

define('HTTPS_SERVER', 'https://www.yourwebsitename.com');  

define('ENABLE_SSL', true);  

 

This is under your catalog side, NOT admin as there is a configure.php file in admin/includes as well, so be careful and Backup your files! First - Make a Backup! then change configure.php file and try it.

[ArtcoInc]

@@RobReynolds

 

Visit your site by typing http://www.<YourSite>.com

 

Now, try it again by typing https://www.<YourSite>.com  (include the 's')

 

If it now shows that you are indeed using SSL, then you know that the certificate is installed correctly. If not, you may need to talk to your host.

 

Once you get this working, you can choose to have your entire site encrypted with your SSL certificate, or just the sensitive pages. If you just want the sensitive pages, you need to edit your /includes/configure.php file so that line 2 includes the https:// in the path, and line 3 is set to 'true'.

 

If you want the entire site to be encrypted, you can use your .htaccess file to redirect all calls you your site without the https to now include the https.

 

HTH

 

Malcolm

[MrPhil]

Basically, there are two separate things going on here:

1. Properly install the SSL certificate. This is something that only your host can do. osC has nothing to do with it. If properly done, using https: instead of http: will simply work in your browser.
2. Configure osCommerce, as described by @@allaboutwicker, to use SSL (https) for certain pages.