Any special setup for SSL?

[NadiaUSA]

Hi,

Are there any special thing that need be done to install zencart or modules in an SSL domain? Are there any known issues or code to be changed from http to https?

Regards,
Nadia

[stevesh]

Start here:

https://www.zen-cart.com/tutorials/index.php?article=14

[NadiaUSA]

Thanks,

Does anyone have a sample htaccess file for SSL?

My certificate is applied to the root:
www.mysite.com

My zen-cart is in:
www.mysite.com/store

I have no htaccess in my root now. I need to get some copy and paste code to make one.

Regards,
Nadia

[misty]

Why do you require htaccess file..if you have SSL for your domain, having zencart in folder does not make any difference..
SSL should work if you alter both configure
files to reflect change to SSL cert that your webhost
should have installed after you purchased it.

[NadiaUSA]

Oh, I thought I needed one because I dont see a padlock in my browser.

[misty]

Oh, I thought I needed one because I dont see a padlock in my browser.

You wont see padlock until both zencart configure files
are correctly altered to reflect your new SSL cert.

[NadiaUSA]

Oh there is a padlock if the prefix is https not http

The only problem in that people can type in http://mysite.com instread of mandatory redirect to https://mysite.com

do I need a htaccess redirect to prevent people from typing in http?

[misty]

Oh there is a padlock if the prefix is https not http

The only problem in that people can type in http://mysite.com instread of mandatory redirect to https://mysite.com

do I need a htaccess redirect to prevent people from typing in http?

No...zencart will change to https when required..
i e member login, shopping cart etc..you only need
https for secure information being entered into your store.
You do not need to prevent visitors typing in http.

[NadiaUSA]

Start here:

https://www.zen-cart.com/tutorials/index.php?article=14

Thanks for the quick responses,

I uploaded the 2 config files and reset the file permissions to read only.

However now the site is blank white pages. I set the false to true and thats all I did. see below.


// HTTPS_SERVER is your Secure webserver: eg-https://www.yourdomain.com

define('HTTP_SERVER', 'http://clubina.com');

define('HTTPS_SERVER', 'https://clubina.com');



// Use secure webserver for checkout procedure?

define('ENABLE_SSL', 'true');


and I also changed the other config page

* If you desire your *entire* admin to be SSL-protected, make sure you use a "https:" URL for all 4 of the following:

*/

define('HTTP_SERVER', 'http://clubina.com');

define('HTTPS_SERVER', 'https://clubina.com');

define('HTTP_CATALOG_SERVER', 'http://clubina.com');

define('HTTPS_CATALOG_SERVER', 'https://clubina.com');



// secure webserver for catalog module and/or admin areas?

define('ENABLE_SSL_CATALOG', 'true');

define('ENABLE_SSL_ADMIN', 'true');

-------------

I changed them back to false but it is still all white.

Help

[NadiaUSA]

I also get this message in my admin:

Warning: session_start(): Cannot send session cookie - headers already sent by (output started at /home/content/c/l/u/clubina/html/store/admin/includes/configure.php:181) in /home/content/c/l/u/clubina/html/store/includes/functions/sessions.php on line 108

Warning: session_start(): Cannot send session cache limiter - headers already sent (output started at /home/content/c/l/u/clubina/html/store/admin/includes/configure.php:181) in /home/content/c/l/u/clubina/html/store/includes/functions/sessions.php on line 108

Warning: Cannot modify header information - headers already sent by (output started at /home/content/c/l/u/clubina/html/store/admin/includes/configure.php:181) in /home/content/c/l/u/clubina/html/store/admin/includes/init_includes/init_templates.php on line 36

Warning: Cannot modify header information - headers already sent by (output started at /home/content/c/l/u/clubina/html/store/admin/includes/configure.php:181) in /home/content/c/l/u/clubina/html/store/admin/includes/functions/general.php on line 21