SSL questions...

[KismetDesign]

I'm setting up SSL for the first time, and followed the general tutorial on how to do this from the Zen Cart documentation.

I check my site and it does work with the https:

Couple of questions though...

1) In the Admin/Includes/Configure file, there is no place to put in the define( 'ENABLE_SSL', 'true');

instead, it says a couple of lines below:

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'false');
efine('ENABLE_SSL_ADMIN', 'false');

Do I change these to 'true'?

Also, in my admin panel under Configuration -> Sessions... not sure what should be set to true or false? I'm going to list them below as I have it now.

Cookie Domain : True
Force Cookie Use : False
Check SSL Session ID : False
Check User Agent : False
Check IP Address : False
Prevent Spider Sessions : True
Recreate Session : True
IP to Host Conversion Status : true

Any help would be great!

Thanks!

KismetDesign

[mprough]

Your sessions setting are correct...

This

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'false');
efine('ENABLE_SSL_ADMIN', 'false');

Is from your admin configure file.

The one for checkout is located at Zen_Cart_Directory/includes/configure.php

~Melanie

[KismetDesign]

I did the one from my includes folder already, and I copied exactly from the install.txt file, so I'm pretty sure that one is correct.

What about the settings inside of my admin panel under the Configuration -> Sessions?

KD

[KismetDesign]

Oh, just saw you answered both questions... fantastic. Thank you.

[KismetDesign]

2 last questions.. (I hope)

1) How can I tell if the SSL is working? I notice when I type in the https://www.mydomainname.com, there is a lock icon in the bottom left corner of my screen. Then when it goes to one of my information pages or product pages, the lock icon disappears.

And if I follow it all the way through to the checkout page, I still can't see an icon. ???

2) I want to install some kind of SSL seal on my site, but I'm not sure where to do it. I have some code that I found on the SSL's supporting website, but I don't understand where to put it when it says 'put it on every page you need it on'.

How does that translate over to Zen Cart?

[Website Rob]

The locked Icon shows that 'https' is working. A single or double click on the icon will bring up your SSL details. The locked Icon is only shown on 'https' pages and will not show on regular / non-https pages.

In the Free Add Ons there is a module called Blank Sidebox. Most people use it to display a Security Seal on their pages.

[KismetDesign]

Hmmm... so when I went into firefox to bring up our home page, I typed in the https://www.mydomainname.com and firefox showed a 'Secure Connection Failed' screen that says we are using an invalid security certificate.

It says The certificate will not be valid until 8/27/2009 at 3:25 pm. Well... it's already 9/1/2009... so I wonder what in the world is going on with it.

Lastly, it says on the 3rd line down: (Error code: sec_error_expired_certificate)

Can anyone that has SSL experience translate for me? Not sure what is going on with it.

I will go and check out the Blank Sidebox add-on for the SSL seal, thank you for that suggestion.

[kobra]

Glad to....where is the site?

[Website Rob]

Hmmm... so when I went into firefox to bring up our home page, I typed in the https://www.mydomainname.com and firefox showed a 'Secure Connection Failed' screen that says we are using an invalid security certificate.

It sounds like whomever installed the Cert for you did not do it correctly. Contact them about it.

[KismetDesign]

It was a stupid error on my part. I got it working. Thanks everyone.