SSL Certificate Installed, Now What?

[woodenski]

I have installed a dedicated SSL from Hostgator. Now, I wonder what is next. I am using only Check and PayPal Express for Payment. So, it seems like the SSL is not really of much value for my customers? As paypal takes care of the secure portion.

I have two questions.

First, how do I know that I have successfully installed the SSL on ZenCart and that all is working as it should be?

Second, it would seem like the SSL for admin would be a good thing, I have turned it on, and go to https:// to login, which seems to work fine, I see the https:// in the navbar. But, when I go to a specific section of the admin (say the shipping setup), the https:// changes back to http://. I would assume that the whole admin would be https://

my site is http://2neat.com
latest version of ZenCart.

thanks,
mark

[kobra]

The tutorials link above right is a resource for these basic often asked questionsI searched for "SSL"

https://www.zen-cart.com/tutorials/index.php?article=14

[woodenski]

The FAQ link is what I used to set up the SSL. The directions were clear and it seemed to work fine.

I don't understand why in the admin, some pages show the https, and others don't. This concerns me, and I would like some idea on how to test that the SSL is correctly installed and recognized by ZenCat.

mark

[nigelt74]

regarding the store side

zencart switches to the ssl link only when you are submitting sensitive info so if you click on the login link for your store, it should go to https,
Which on your store it doesn't, so i am guessing it isn't set up properly

Have a look at this store
http://sweetbrucies.co.nz/

if you click on the login link it automatically switches to https://

Thats how the site should work

As for admin

you have to set both links in the admin configure file set to https instead of one to http:// if you want the entire admin to be ssl, I did have a link that explains that

edit-----------------------

this is from the link Kobra posted

ADMIN SECURITY NOTE: In Zen Cart v1.x, if you want to secure all your ADMIN pages with SSL, set the HTTP_SERVER in your "/admin/includes/configure.php" to the same working URL as your HTTPS_SERVER setting. (You will then have both an HTTP_SERVER and HTTPS_SERVER defined to the same value.) THIS IS REQUIRED FOR PCI COMPLIANCE, and will happen automatically with new installations of v1.5.x and newer.

[woodenski]

Thanks Nigel, it was that last paragraph that I missed.