Problem with admin and SSL
I have a certificate installed and setup on the server.
When i installed, i selected to enable SSL and to have SSL on the admin area.
When i login, its all fine, until i go to select an order and it wants to switch from ssl to normal, should this stay where it and be loading everything from my httpsdocs folder?
I have idential files in both the httpdocs and httpsdocs
Rob
This is from my admin/includes folder that was generated from the installation and have noticed it says change all four below, if i do it wont make the full catalogue view on the secure side?
* If you desire your *entire* admin to be SSL-protected, make sure you use a "https:" URL for all 4 of the following:
*/
define('HTTP_SERVER', 'http://www.mydomain.co.uk');
define('HTTPS_SERVER', 'https://www.mydomain.co.uk');
define('HTTP_CATALOG_SERVER', 'http://www.mydomain.co.uk');
define('HTTPS_CATALOG_SERVER', 'https://www.mydomain.co.uk');
// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');
Re: Problem with admin and SSL
Not sure what your issue is from your explanation...
By default - only the functions that send sensitive information are over SSL and this helps keep general shopping faster.
Re: Problem with admin and SSL
Sorry, what i was trying to say was, i enabled ssl for the admin area. When i am logged in on the admin area its secure, until i select someones order on the right then it jumps out of the secure area (url changes to http). I thought by enabling ssl for admin area it would remain in the secure area.
I did notice, the text mentioned in the configure.php (includes/admin) about the entire admin being in the ssl, and to enable all four lines, this is my current setting
define('HTTP_SERVER', 'http://www.mydomain.co.uk');
define('HTTPS_SERVER', 'https://www.mydomain.co.uk');
define('HTTP_CATALOG_SERVER', 'http://www.mydomain.co.uk');
define('HTTPS_CATALOG_SERVER', 'https://www.mydomain.co.uk');
but one of them lines above is the catalogue, and i want the viewing of the catalogue not to be in the ssl area, i hope im making sense here :)
Apart from that the whole ordering side is functioning perfect, i just want to remain in ssl when in admin and not for it to keep prompting im leaving a secure area etc
Rob
Re: Problem with admin and SSL
If you want your entire admin area to be SSL, set your HTTP_SERVER to be an https://blahblah address ... just like your HTTPS_SERVER setting.