Results 1 to 6 of 6
  1. #1
    Join Date
    Sep 2010
    Location
    Massillon, OH
    Posts
    12
    Plugin Contributions
    0

    Default SSL works only in top pages in Admin

    I have enabled the SSL in my store by updating the admin and main config files to 'true'. I also enabled catalog SSL. When I log into the admin section I log into a secure site:

    https://www.xxxxxxx.com/store/xxxadm...hp?set=payment

    But when I go to subsequent pages, for example installing the Linkpoint API, it drops the security:

    http://www.xxxxxxx.com/store/xxxadmi...=linkpoint_api

    I have cleared cookies and cache for the past 2 days, and tried in Chrome and Firefox.

    Any suggestions?

  2. #2
    Join Date
    Sep 2010
    Location
    Massillon, OH
    Posts
    12
    Plugin Contributions
    0

    Default Re: SSL works only in top pages in Admin

    Quote Originally Posted by suzithepid View Post
    I have enabled the SSL in my store by updating the admin and main config files to 'true'. I also enabled catalog SSL. When I log into the admin section I log into a secure site:

    https://www.xxxxxxx.com/store/xxxadm...hp?set=payment

    But when I go to subsequent pages, for example installing the Linkpoint API, it drops the security:

    http://www.xxxxxxx.com/store/xxxadmi...=linkpoint_api

    I have cleared cookies and cache for the past 2 days, and tried in Chrome and Firefox.

    Any suggestions?
    Urgent...I cannot set up the Linkpoint api without the ssl working on that page!

  3. #3
    Join Date
    Sep 2010
    Location
    Massillon, OH
    Posts
    12
    Plugin Contributions
    0

    Default Re: SSL works only in top pages in Admin

    When I set it up like this:

    **
    * WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN:
    * To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries:
    */
    define('HTTP_SERVER', 'https://www.xxxxxxxxx.com');
    define('HTTPS_SERVER', 'https://www.xxxxxxxxx.com');
    define('HTTP_CATALOG_SERVER', 'http://www.xxxxxxxxx.com');
    define('HTTPS_CATALOG_SERVER', 'https://www.xxxxxxxxx.com');


    // secure webserver for admin? Valid choices are 'true' or 'false' (including quotes).
    define('ENABLE_SSL_ADMIN', 'true');


    // secure webserver for storefront? Valid choices are 'true' or 'false' (including quotes).
    define('ENABLE_SSL_CATALOG', 'false');

    I get into an endless loop that makes it so I cannot log in. I keep entering my login and it takes me back to the login page. Removing the https from the HTTP_SERVER fixes that.

  4. #4
    Join Date
    Dec 2009
    Location
    Amersfoort, The Netherlands
    Posts
    2,845
    Plugin Contributions
    25

    Default Re: SSL works only in top pages in Admin

    What happens if you set
    Code:
    define('ENABLE_SSL_CATALOG', 'false');
    to true ?

  5. #5
    Join Date
    Jan 2004
    Posts
    66,443
    Plugin Contributions
    279

    Default Re: SSL works only in top pages in Admin

    Quote Originally Posted by suzithepid View Post
    When I set it up like this I get into an endless loop that makes it so I cannot log in. I keep entering my login and it takes me back to the login page. Removing the https from the HTTP_SERVER fixes that.

    **
    * WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN:
    * To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries:
    */
    define('HTTP_SERVER', 'https://www.xxxxxxxxx.com');
    define('HTTPS_SERVER', 'https://www.xxxxxxxxx.com');

    // secure webserver for admin? Valid choices are 'true' or 'false' (including quotes).
    define('ENABLE_SSL_ADMIN', 'true');
    You could probably set define('ENABLE_SSL_ADMIN', 'true'); to 'false' instead, and that would stop the need for any redirects.
    But, if merely using SSL is causing redirects, then it's quite possible something is misconfigured in your server's apache vhost where SSL settings are set.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  6. #6
    Join Date
    Sep 2010
    Location
    Massillon, OH
    Posts
    12
    Plugin Contributions
    0

    Default Re: SSL works only in top pages in Admin

    Quote Originally Posted by DrByte View Post
    You could probably set define('ENABLE_SSL_ADMIN', 'true'); to 'false' instead, and that would stop the need for any redirects.
    But, if merely using SSL is causing redirects, then it's quite possible something is misconfigured in your server's apache vhost where SSL settings are set.
    The problem was not the store, but the server. The main information section of the server said I had the latest version of PHP istalled. But, upon further scrutiny, I found by looking at the server information it was 5.2. When I called the host company they balked at first, but eventually admitted their mistake, updated the PHP and the site works fine.

    Thank you for your assistance.

 

 

Similar Threads

  1. SSL - Only works when I type https...
    By aaelghat in forum General Questions
    Replies: 1
    Last Post: 5 Feb 2008, 05:03 AM
  2. Changed to SSL only, cart no longer works.
    By mocara in forum Basic Configuration
    Replies: 9
    Last Post: 13 Jul 2007, 01:14 AM
  3. SSL and Admin Login (config file) - only works with dedicated IP???
    By firstimpression in forum General Questions
    Replies: 6
    Last Post: 26 Jan 2007, 10:38 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg