SSL Help (I've read through, but no help yet)

[Merritt]

I have read through the forum and haven't found specific help to my needs. I may not have understood them, so just letting you know that I am not trying to double post here, but rather getting instructions for MY clients domain.

I've got my https server set up but i get this message:

An error occurred during a connection to strongarmballistics.com.

SSL received a record that exceeded the maximum permissible length.

(Error code: ssl_error_rx_record_too_long)

Also, when I go to the site and try to checkout something, by the time i get to the products list page is goes to http://strongarmballistics.com instead of http://www.strongarmballistics.com. Since the code in the cfg files are http://www. the SSL wont work (obviously since it just goes through as a regular site) right?

I need to get this working as soon as possible, but learning how to set this up correctly is more important than time length!

If there is more information you need let me know!

Here are the configuration files strings/lines that i edited from its original version:

admin/includes/:

   */
  define('HTTP_SERVER', 'http://www.strongarmballistics.com');
  define('HTTPS_SERVER', 'https://www.strongarmballistics.com/');
  define('HTTP_CATALOG_SERVER', 'http://www.strongarmballistics.com');
  define('HTTPS_CATALOG_SERVER', 'https://www.strongarmballistics.com/');

  // Use secure webserver for catalog module and/or admin areas?
  define('ENABLE_SSL_CATALOG', 'true');
  define('ENABLE_SSL_ADMIN', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!

includes/:

// Define the webserver and path parameters
  // HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
  // HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
  define('HTTP_SERVER', 'http://www.strongarmballistics.com');
  define('HTTPS_SERVER', 'https://www.strongarmballistics.com/');

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

As you can probably figure out, the domain is http://www.strongarmballistics.com -- I was wondering, other than these problems (and the only reason i have to secure the checkout page is because authorize.net is requesting my client to do so), is there anything on the page that needs to be changed, edited, or you just see some other problems that need to be fixed please let me know!

I appreciate the help!

Thanks again,

Dave Merritt
CEO and Founder
Merritt and Company, Corporation
http://www.merrittcompany.com

[Website Rob]

This is a problem your Hoster needs to correct as the SSL Cert is not properly setup. Has nothing to do Zen Cart.

[Ajeh]

Also, once you fix your SSL certificate, check these settings:

define('HTTPS_CATALOG_SERVER', 'https://www.strongarmballistics.com/');

define('HTTPS_SERVER', 'https://www.strongarmballistics.com/');

You have those ending in a / and they should not ...

[Merritt]

alright thanks for the info guys... i've got a shared ssl site that we can use, but i get a forbidden message when i go to the ssl link. Could i use that instead?

[CybaGirl]

Have you entered in the correct path and account name for the shared SSL?

Personally I would get my own SSL certificate over using a shared one. As it looks more professional and it will improve customer confidence when they are buying from your site. In the past I have found that alot of people get a bit suspect about entering in their financial detials over a shared SSL certificate and may choose to shop elsewhere because of it.

Besides SSL certificates are not that expensive these days and just the other day I brought a three year SSL certificate from GoDaddy for only $53.00. I used a discount coupon of 30% to get this price though. However lately I have noticed that GoDaddy seem to have a 20% discount on SSL certificates on weekends. As well as your own SSL certificate you will need a dedicated IP address, unless of coarse you are using GoDaddy hosting. But because I am using hosting elsewhere this cost me an additional $24.00 per year for a dedicated IP address which was paid to my hosting company.

If you end up going this way, you will need to first check with the hosting company that they allow third party SSL certificates to be installed on their servers. Decent hosting providers that are not out to rip you off will allow this, but some may charge you an installation fee. Should not be anymore than $25.00 IMO.