ssl problems

[christinefred]

I am blind and clueless and confused!
I'm getting the "This page contains both secure and nonsecure items... " as well as the issue of not being able to log on as a customer - security warning.
I have a shared ssl certificate from my host. I have another site with them where I have encountered no problems although I see that the shared address is slightly different.
I have just changed my configure.php files reflecting the shared certificate url that my host supplied.
As far as I can see (although feeling very blind) I have the images correct and secure......??
The thing I do notice is that the page source reveals that the
<base href="http://name of shop here/" /> I notice there is no https
Having spent the day trying to read forums etc. I am offically embarrassed and confused.

I am using v1.3.9f and my site can be viewed as below url under /store

Please help


// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
define('HTTP_SERVER', 'http://www.e-urns.com.au');
define('HTTPS_SERVER', 'https://shared certificate name/~eurns');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');


*/
define('HTTP_SERVER', 'http://www.e-urns.com.au');
define('HTTPS_SERVER', 'https://shared certificate name/~eurns');
define('HTTP_CATALOG_SERVER', 'http://www.e-urns.com.au');
define('HTTPS_CATALOG_SERVER', 'https://shared certificate name/~eurns');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'false');
define('ENABLE_SSL_ADMIN', 'false');


Thanks for anyone to view and help!!!!!!!!

[frank18]

Check your configure.php files and this thread:

http://www.zen-cart.com/forum/showthread.php?t=147054

Also check that your images are being called via https and not via http

[christinefred]

Thank you - I have read this thread but am still non the wiser about the secure, unsecure message or about the 'there was a security issue' warning on log in - still not able to log in when I have 'true' in the config php. If "false" log on is successful.
Any other suggestions????

[schoolboy]

The "insecure item" warning is generated by the brower on the visitor's computer, and is a result (usually) of there being an ABSOLUTE URL embedded on the zencart SSL page.

So, for example, if you have a sidebox of some sort that is calling a resource (perhaps an image) from an absolute URL - ie: http://www.thiswebsite.com/images/picture.jpg - when that sidebox renders on a zencart SECURE page - https://... there will be one element on your SSL page that is coming from a http source, and not a https source.

To find out what element is causing this, when the browser asks if you want to display the insecure element, choose NO, and then load the page.

The "rogue" element will not display, or show up as a place-holder icon.

You can then fix the issue by either removing that absolute URL, (changing it to https://..). or putting the element in your folder(s) and calling using a RELATIVE URL rather than an ABSOLUTE URL.

You can only change the absolute URL to https, if the remote server offering the element is itself https.