SSL Certificate -- Lost, Dazed, & Confused

**Big Kahuna** · 26 Jun 2006, 09:18 PM

OK -- I have my store set up to where I just need to add product and set up the credit card. http://www.diamondbackengines.com/estore/

I signed up with Link Point -- and finally found the Payment Module for it. I haven't installed it yet -- as I want to get my SSL Certificate first.

I have my own server -- although I've not yet needed a SSL certificate. I can figure out how to load it through Web Host Manager once I get hooked up with someone.

My Questions are searching for over an hour and reading lots of questions causing more questions are:

1. Any suggestions on a quick, easy and helpful SSL certificate company?

2. If my store is at http://www.diamondbackengines.com/estore/ -- what is the address that I give the SSL company? I'm confused on if you use www or not.

3. Is there any good thread or document that what set up to properly instruct people who have never done this before?

**Merlinpa1969** · 26 Jun 2006, 10:05 PM

I always use the www.

as for recomendations please PM em

**Big Kahuna** · 26 Jun 2006, 10:15 PM

Originally Posted by Merlinpa1969

I always use the www.

as for recomendations please PM em

OK -- I'll use the www

how about a document or thread with step-by-step instructions on configuring to set up aceepting credit cards -- that tells of the SSL certificate and payment Gateway steps needing to be taken. I looked hard and can't find clear instructions for the novice that has never done this before.

**Vger** · 26 Jun 2006, 10:49 PM

I have my own server

I looked hard and can't find clear instructions for the novice that has never done this before.

I hope you don't mind me saying this, but running your own server/s is a little bit more involved than buying one - especially if you are going to be self-administering it. But hopefully you do have experience of running your own server and it's just installing the SSL cert you are stuck on.

Most servers come with Open SSL installed, so you can use that as the root certificate authority. You also need a dedicated ip address, but if this cert is for the server domain then you've already got that.

Next you need to generate a CSR (Certificate Signing Request), which hopefully you have the ability to do from your server control panel.

Once you've got that then you need to buy your cert. If you use Open SSL then you may as well go for a real cheapie like GeoTrust Starter SSL, from ev1servers.net. Then go to your control panel and elect to Import it.

And once that's done successfully then you need to restart the Windows or Apache service for the cert install to be completed.

Vger

**Big Kahuna** · 27 Jun 2006, 01:59 AM

Originally Posted by Vger

I hope you don't mind me saying this, but running your own server/s is a little bit more involved than buying one - especially if you are going to be self-administering it. But hopefully you do have experience of running your own server and it's just installing the SSL cert you are stuck on.

Most servers come with Open SSL installed, so you can use that as the root certificate authority. You also need a dedicated ip address, but if this cert is for the server domain then you've already got that.

Next you need to generate a CSR (Certificate Signing Request), which hopefully you have the ability to do from your server control panel.

Once you've got that then you need to buy your cert. If you use Open SSL then you may as well go for a real cheapie like GeoTrust Starter SSL, from ev1servers.net. Then go to your control panel and elect to Import it.

And once that's done successfully then you need to restart the Windows or Apache service for the cert install to be completed.

Vger

I've had a server for about 4 years (this is the second one -- and I'll be going on my third in July) -- mainly because I have a large Mopar board and designed/host about 100 sites for small businesses. It was set up by a pro who maintains the updates and security end of it -- but it is not his job to maintain the accounts, restart a service that might be hosed, oor deal with the certificates. To date only one has needed a SSL certificate. I should have explained further -- I know how to generate generate a CSR -- and I followed the instructions sent with it for WHM -- but I didn't know who to contact, what to ask for, and what to do to make it work in Zen Cart. There is no shared SSL certificate on the server -- everyone is pretty much suppose to get one for their site if they need it.

The one customer on the server with a ZenCart site that needed a certificate originally screwed up with if if had www or not. I forget the details, but I wish there was some type of step by step document that explained the Dos and Don'ts of what to buy (like the domainname issue with or without www), where to buy it (I realize the liability of recommending something -- but there appears to be an arrangement with one of the payment Gateways being pushed), and what changes (and where) need to be made to get it to work right the first tiem -- it sure would save me a lot of time, effort, and most likely mistakes trying to piece mill hour of reading threads on payment modules, where to find them when they aren't where they belong, which information is old information, and how to do this without screwing up.

**kobra** · 27 Jun 2006, 08:12 AM

Setting up SSL on a hosting server is not a ZenCart issue.

A quick Google produced this:

SSL on Apache/LINUX
Apache/Linux SSL

Once the server/Apache is configed to validate/register the normal Zencart setup will function correctly.

**Vger** · 27 Jun 2006, 01:52 PM

where to buy it (I realize the liability of recommending something -- but there appears to be an arrangement with one of the payment Gateways being pushed),

Let's get this right - you are asking for recommendations on where to buy one, but then making accusations that people are pushing a particular provider if they do recommend someone? Sounds perverse to me.

The reason I made the recommendation is simple:
1. That cert uses Open SSL as its trusted root, so is easier to install for someone managing their own server.
2. It's the cheapest full ssl cert available.
3. It's only the cheapest if you buy it from that source - elsewhere it will cost you a whole lot more.

I have no financial interest in making that recommendation. I was trying to help, but I'm out of this discussion now.

Vger

**Big Kahuna** · 27 Jun 2006, 04:46 PM

Originally Posted by Vger

Let's get this right - you are asking for recommendations on where to buy one, but then making accusations that people are pushing a particular provider if they do recommend someone? Sounds perverse to me.

The reason I made the recommendation is simple:
1. That cert uses Open SSL as its trusted root, so is easier to install for someone managing their own server.
2. It's the cheapest full ssl cert available.
3. It's only the cheapest if you buy it from that source - elsewhere it will cost you a whole lot more.

I have no financial interest in making that recommendation. I was trying to help, but I'm out of this discussion now.

Vger

Dude -- ease up on the caffine and read my post again. I was asking for a recommendation, and justifying that it shouldn't be a problem to give one since a recommendation is given for a Gateway (which is also appreciated). The reason the justification was given was because of a previous post that said to give that advice in a PM and not publicly. As no PM was forthcoming I wondered out loud why it was a problem to point someone in the right direction. The statement about a recommendation on a payment is not an accusation -- it is a fact -- and again it was an recommendation I appreciated because it saved time shagging up one less lead. No Biggie -- as I saw where this was going and shot in the dark and got my certificate.

As far as a SSL Certificate being beyond the scope of ZenCart -- I'll admit that installing one on a server is. However, I wasn't so much interested in how to install it on the server as I was to make sure I got what I needed to run ZenCart. I was finding there was different types of certificates, and that you had to be specific on an exact address. I didn't want to buy the wrong type or get it for an address that didn't work because of some unknown reasonj. Was it such a big deal to share a little knowledge with someone never doing this before with a tip sheet on if you should use www or not when they buy the certificate, what type will and will not work, who offers a reasonable deal -- and/or what files will need to be modified?

I realize that all of the people born with this knowledge have no confusion -- but a simple search of SSL on the forums will indicate that a lot of people are confused on this subject -- and questions on the topic appears to irritate the so-called experts so much that the questions never get answered, are only half answered, or have all kinds of people getting defensive over nothing because they read more than the words.

Zencart appears to have an arrangement with a credit card Gateway (which for the third time is great by me) -- but the module to use it isn't in the download area for payment modules -- but after enough reading of threads a person can find an obsure post with a link to it. These are the battles we non-experts are fighting -- and it is damn frustrating.

All I asked for is if there was a thread or document that I missed in my hours of searching that might spell this out to to the people that are doing this for the first time -- and I guess the simple answer is No. I could have easily accepted that answer and gone about doign what I'm having to go about doing. That's all I needed to know, and I guess I'll double or triple my time figuring it out myself. After I figure it out -- I'll try to visit here from time to time and pass along my experience to others who weren't born with the knowledge as a natural instinct.

That all said, I love ZenCart and do appreciate the people who take the time to make it better, and the ones who do try to help the rookies. Maybe someday it will have some kind of manual like phpadsnew does -- and then people will not need to humble themselves ask for advice or read through 100s of posts that create more questions than answers.

**Vger** · 27 Jun 2006, 04:56 PM

Hi, I read your post differently, and as it covered several topics that's why I probably mistook what you were saying and ended up taking it the wrong way.

To answer a specific question - as to whether a cert is issued to www.yourdomain.com or just yourdomain.com usually relies entirely upon which type of server your site is hosted on. You tell the SSL Cert company you use one type of server then it outputs an ssl with a www. address, you tell the company it's another type of server then it outputs an address without the www.

Vger

**Big Kahuna** · 27 Jun 2006, 05:23 PM

Originally Posted by Vger

Hi, I read your post differently, and as it covered several topics that's why I probably mistook what you were saying and ended up taking it the wrong way.

To answer a specific question - as to whether a cert is issued to www.yourdomain.com or just yourdomain.com usually relies entirely upon which type of server your site is hosted on. You tell the SSL Cert company you use one type of server then it outputs an ssl with a www. address, you tell the company it's another type of server then it outputs an address without the www.

Vger

I'm glad that we've ironed out the misunderstood tempo of the message.

I did get the certificate, it turns out that my registrar of choice (I have over 100 domains with them and I just assume try to keep as much as possible in one account) had a 2-year "Turbo" certificate for $55. I got it with them for the domain name with www in the address, and I'm going to install it this morning.

I've signed up with the gateway of choice at Zencart (and I actually hope they get a birddog fee by me clicking the link -- as they deserve coin rolled their way), and I have found the post that had the payment module upload link (it wasn't in the upload section -- at least yesterday and took awhile to find) -- although I haven't had the time to figure out how to install it yet. When I went to the Payment modules part in admin (before I found the module to download) I was getting all kinds of file not found errors from line 188 of (I think) the modules.php program. I got busy and haven't yet tried to see if I will be able to install the module despite the errors -- and kinda figured I should get the SSL certificate and sign up with a credit card gateway first.

Once the certificate and the module are installed -- I'll figure out if it is just going to be a config file modification that gets it all to work -- or if I'll have other problems I'll need to figure out.

I appologize if I came off as strong as ten tons of garlic -- it is just that I'm really frustrated from the many hours of wrestling with this one small area (because of my lack of understanding and answers to my questions) -- when I'm really behind the gun. At the moment, time is my most valuable commodity -- and on things I don't know -- I actually follow GOOD & COMPLETE instructions very well. I am also a concept guy -- when briefly explained the reason for doing something -- I typically have a better understanding. I worked on this (and with the SSL) until very late last night -- and just feel that I wasted many hours trying to get an understanding of what I was doing because I couldn't find a little tip sheet/FAQ to I minimize the mistakes from guessing.

Thanx for your help.