PayPal Pro, SSL and the module that never appears!

[obrien48]

Hi everyone,

Looking for a few pointer as I'm going round and round in circles. Trying to set up Payment Pro and can't get the install button to appear - keep getting the "ALERT: For security reasons, Installation of this module is disabled until your Admin is configured for SSL."

1. My provider gives me this notice for secure server...

We have mapped the URL:-
https://web230.secure-secure.co.uk/obriendesign.co.uk/ to http://www.obriendesign.co.uk

2. I set admin configure to:

define('HTTP_SERVER', 'http://www.obriendesign.co.uk');
define('HTTPS_SERVER', 'https://web230.secure-secure.co.uk/obriendesign.co.uk');
define('HTTP_CATALOG_SERVER', 'http://www.obriendesign.co.uk');
define('HTTPS_CATALOG_SERVER', 'https://www.obriendesign.co.uk');

// secure webserver for admin? Valid choices are 'true' or 'false' (including quotes).
define('ENABLE_SSL_ADMIN', 'true');

// secure webserver for storefront? Valid choices are 'true' or 'false' (including quotes).
define('ENABLE_SSL_CATALOG', 'true');

*Bear in mind I've had loads of combos in there - that's just how it sits currently!

3. includes configure set to:

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
define('HTTP_SERVER', 'http://www.obriendesign.co.uk');
define('HTTPS_SERVER', 'https://www.obriendesign.co.uk');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/obriendesign.co.uk/');


Nothing! I'm also getting weird duplicated section of path in the address now which I don't seem to be able to fix - it reads "http://www.obriendesign.co.uk/obriendesign.co.uk/0br1en/modules.php?set=payment" and then of course I get an error message and can't see any modules.

Any ideas? Normally zen is straight forward but this has me stumped!

Thanks in advance.

[badarac]

This is a change in 1.5. The configure.php file in the admin directory now contains the following note: /**
* WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN:
* To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries:
*/
That should also include a comment that says that in order to install some modules ALL pages in the admin must be accessed using https. Making the following changes to your admin configure.php should solve the problem

define('HTTP_SERVER', 'https://www.obriendesign.co.uk');
define('HTTPS_SERVER', 'https://web230.secure-secure.co.uk/obriendesign.co.uk');
define('HTTP_CATALOG_SERVER', 'https://www.obriendesign.co.uk');
define('HTTPS_CATALOG_SERVER', 'https://www.obriendesign.co.uk'); 

[obrien48]

This is a change in 1.5. The configure.php file in the admin directory now contains the following note: /**
* WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN:
* To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries:
*/
That should also include a comment that says that in order to install some modules ALL pages in the admin must be accessed using https. Making the following changes to your admin configure.php should solve the problem

define('HTTP_SERVER', 'https://www.obriendesign.co.uk');
define('HTTPS_SERVER', 'https://web230.secure-secure.co.uk/obriendesign.co.uk');
define('HTTP_CATALOG_SERVER', 'https://www.obriendesign.co.uk');
define('HTTPS_CATALOG_SERVER', 'https://www.obriendesign.co.uk'); 

Dude you rock! Now to get the site filled and sell, sell, sell!

[DrByte]

2. I set admin configure to:

define('HTTP_SERVER', 'http://www.obriendesign.co.uk');
define('HTTPS_SERVER', 'https://web230.secure-secure.co.uk/obriendesign.co.uk');
define('HTTP_CATALOG_SERVER', 'http://www.obriendesign.co.uk');
define('HTTPS_CATALOG_SERVER', 'https://www.obriendesign.co.uk');

If you read the SSL FAQ again, you'll see that it tells you that for the ADMIN configure.php if you want SSL on everything (which you need for payment modules) then you need to set the HTTP_SERVER to be the same as the HTTPS_SERVER.
So that means you need this:

define('HTTP_SERVER', 'https://web230.secure-secure.co.uk/obriendesign.co.uk');
define('HTTPS_SERVER', 'https://web230.secure-secure.co.uk/obriendesign.co.uk');

3. includes configure set to:
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/obriendesign.co.uk/');

I'm also getting weird duplicated section of path in the address now which I don't seem to be able to fix - it reads "http://www.obriendesign.co.uk/obriendesign.co.uk/

That duplication is because you've put the URL into both the HTTPS_SERVER and DIR_WS_HTTPS_CATALOG settings, so it's combining them together. Put it in one place OR the other, not both. Best to leave it in the HTTPS_SERVER setting, and set both DIR_WS_CATALOG and DIR_WS_HTTPS_CATALOG to just '/'. Same with DIR_WS_ADMIN and DIR_WS_HTTPS_ADMIN in the admin configure.php file.

In summary, ALL you needed to do in the first place was set HTTPS_SERVER to https://web230.secure-secure.co.uk/obriendesign.co.uk for both the admin and non-admin. And in the admin, also set the same for HTTP_SERVER. Then set the ENABLE_SSL and ENABLE_SSL_ADMIN to true. Everything else could have been left alone.