SSL Padlock

[TnT666]

Hi,

Another SSL question - I looked through the others I could find but couldn't find anything about this in particular.
I got the hosting provider to get and set up a SSL certificate for a site, and I followed the directions to change the configuration files as necessary. It seems to work fine - uses https for log in and check outs etc, but there have been some queries from potential customers saying that the padlock icon isn't appearing in their browser.

I checked in IE and it doesn't appear at all, and in firefox it has the icon of a padlock with a cross through it. I questioned the hosting provider about it and they replied saying:
"For the lock to come up properly you need to reference all the links with https://blah.blah

or do not stick the full path as in http://YOURDOMAIN/folder/folder/file

just use the relative paths as in /folder/folder/file and this will pull it through
the encryption part of the web server."

As far as I know it should be doing that? It's probably something simple but I'm not sure why it is doing this. The site is:
http://www.guitarsfromhell.com.au

Any help on the matter would be muchly appreciated.

Thanks,
Darren

[Merlinpa1969]

Site not found when using your link

[adelante]

The url was missing an o in from. Gee some great guitars there. It looks like you've got some unsecured items on the page they could be links to images external to your site, external java etc. I had the same problem with Google Maps.

I hope that helps.

[NamSingh]

In IE you will get a little NO ENTRY Sign near the bottom, double click that and it should show any blocked sites. This will break SSL, also check every image on an SSL page and make sure you do reference them as host said, so <img src="images/whatever.jpg">

[Merlinpa1969]

its a little more in depth than that,

NONE of the images are using https

this even though the basehref is set to https the images are all using http:

Does your server use 2 seperate folders, 1 for secure and 1 for non secure?

If this is the case remember to reset the configure.php files here as well, turning ON the ssl

[TnT666]

Thanks for the responses so far.
Sorry, I noticed the typo in the URL after I previewed and corrected it but didn't realise it didn't correct the actual link.

http://www.guitarsfromhell.com.au

Yeah, that was the weird thing, that all the images and links don't seem to use https even though it should be configured to, and seems to work for the login and checkout links. The server doesn't use separate folders for secure/non-secure - if I get the url for an image and just change it to https it loads up fine.

Any java or images should be hosted locally and referenced to relatively.. unless the client has added in something I haven't noticed. My IE isn't showing blocked sites so it's a little tricky to work out. Will be an arduous task to track down.
Thought it may have been something simple I'd missed.

Cheers for the advice so far.

[Merlinpa1969]

what version of ZC are you using?

There was an issue with a few hosting companies in previous versions,
there were issues with 1and1 if you would like to check em out they should be in the archived posts

[Website Rob]

Looks like an easy fix to me.

Tested your "Login" page and see the following:

base href="http://www.guitarsfromhell.com.au/"

Problably due to misconfiguration in the 'config' file which is why it doesn't use 'https' instead.

[Merlinpa1969]

rob if you navigate the link from the index page you will see that it does go to https.

there was an issue on older versions with hosts like 1 and one, there was a change in the code that needed to be added to fix the issue

if the config file was not set to use https then it wouldnt direct the base login link to a secure link

[Website Rob]

Allow me to clairify.

The Login from the main page does take one to an 'https' connection:
https://www.guitarsfromhell.com.au/i...ain_page=login

Trouble is, once on the Login page the code for base reference is:
base href="http://www.guitarsfromhell.com.au/"

That is incorrect and will cause the problems described already in this thread.

Correct coding within "any ZenCart page" using a URL starting with 'https', should be:
base href="https://www.guitarsfromhell.com.au/" << this is on the 'https' page once you get there




It is easy to confuse problems with an SSL Cert itself and coding used on an SSL page, but in this case, there is no problem with the Cert. Also, checking the config file is the first place to look as the coding error is coming from the Script itself.