Could SSL be pointing to wrong place?

[KismetDesign]

Our SSL (https) is being pointed at our root folder. However, our store is located in a subdirectory called 'cart'. And... the main page within our root folder is being re-directed to an info page on our cart, until we've customized it further.

I keep having issues with shopping carts timing out, and I want to make sure my SSL is set up correctly.

Does it matter if the SSL is pointing to my root directory, even if our store (where we really need it) is located in a subdirectory?

I hope I explained that right.

KD

[Website Rob]

An SSL Cert is for a Domain name only. What dir. a script is located in or what URL you want to use makes no difference.

With regard to Zen Cart, once you setup the two config files to use correct paths, you should not have a problem.

[KismetDesign]

Okay, that makes a little more sense. As far as the two configure files go... the one in my admin is slightly different than the one in my includes... and I'm not sure that I've got the settings right.

Does it matter if I put the www in there?

In my admin/includes/configure.php file I've got this:

define('HTTP_SERVER', 'http://www.eaglerockbooks.com');
define('HTTPS_SERVER', 'https://eaglerockbooks.com');
define('HTTP_CATALOG_SERVER', 'http://www.eaglerockbooks.com');
define('HTTPS_CATALOG_SERVER', 'https://eaglerockbooks.com');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

In my includes/configure.php file I've got this:

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
define('HTTP_SERVER', 'http://www.eaglerockbooks.com');
define('HTTPS_SERVER', 'https://eaglerockbooks.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

If anyone could give me feedback on this, it would be wonderful...

Lastly, in my google checkout admin settings I've got the callback set to this:

https://eaglerockbooks.com/cart/goog...nsehandler.php

And the Callback contents set to Notification as XML

(not sure if it was supposed to be XML or HTML?)

Thank you for your help, anyone...

KD

[Website Rob]

Your SSL Cert is created to use: www.eaglerockbooks.com

Therefore, any 'https' link must also use the same.

[stevesh]

Most SSL certs are valid for just the domain specified. In many cases, subdomains are not secured.

My recommendation would be to move your store to the root of your site, especially since you're not using it anyway.

[KismetDesign]

I switched all the https: to include the www. I did this in all three places, both of the configure files and also the callback in Google's integration section.

So it looks like I've got all of those addresses right?

Do you think that the fact my store is in a subfolder could really be causing the session expired page?

Is it a really complicated process to switch everything into the root directory?

Oh yeah.. after I put back in the www's I uploaded and tried again. Same results. :-(