SSL address duplication

[jeanmichel]

Hi, lets say the address of my site is

http://mysite.com

now that i have enabled SSL and the 2 configure.php files on the server are set right i've got problems:

-No more stylesheet

-when i click on any link it would load the page as "http://www.thepage.com" and it would generate the classic "unable to connect" page. But if i add and "s" to make "https://www.thepage.com" it'll load the page ok but still without any style attached to it.

-I dont have any access to the admin panel. If i type in the address bar the usual "http://www.mysite.com" it'll load the "unable to connect" page again and if i type "https://www.mysite.com" it'll load that address: "https://www.mysite.comhttps//www.mysite.com/admin/login.php".

Please give me a hand on those ones.

[DrByte]

Please post your /includes/configure.php and /admin/includes/configure.php files without the database password. It would be best if you do NOT make any other alterations before posting, as exact URL contents are important.

[jeanmichel]

OK

But i wont post exact url.

i've replaced my domain name by 'mysite'. Thats all.

Otherwise, in my previous mail, i've explained quite accuratly what is actually happening when i type in the address.

Thanks to you.

[DrByte]

define('HTTP_SERVER', 'http://www.mysite.com');
define('HTTPS_SERVER', 'https://www.mysite.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'false');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', 'https://www.mysite.com/');

URL's are built from the combination of:

Non-SSL: HTTP_SERVER plus DIR_WS_CATALOG
SSL: HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG

Thus, by repeating the URL in your DIR_WS_xxxx settings, you will experience the symptoms you described.



Similar issue for the admin:

define('DIR_WS_ADMIN', '/admin/');
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_ADMIN', 'https://www.mysite.com/admin/');
define('DIR_WS_HTTPS_CATALOG', 'https://www.mysite.com/');

[jeanmichel]

That i had noticed and changed it before your reply. And it resolved the duplication problem

But it didnt help those facts:

-Still no stylesheet is attached to my pages, only to the admin area. (my admin area and admin catalog arent SSL enabled by choice. But to be able to enter my admin pages, i have to type "https://www.mysite.com/admin" otherwise it loads the "unable to connect" page)

-my home page opens as https but all my links are http and so when i click on them it loads the "unable to connect" page. (SSL is enable for checkout procedure)

Even when i click on the Home link, on my https homepage, it loads http homepage address in the address bar and again shows the "unable to connect" page.
And the admin area, its exactly the same, all the links are "http" so it never loads the pages ok.

So i'm trying to go the the "admin/configuration/sessions" in order to set the "check SSL_session_ID" option to What? True or false?

Is it possible that my domain ssl cert isnt activated yet?

[DrByte]

Is it possible that my domain ssl cert isnt activated yet?

I suppose anything's possible. What's your hosting company telling you?

[DrByte]

-Still no stylesheet is attached to my pages, only to the admin area.

This is a result of the file being inaccessible. Sometimes this is due to .htaccess restrictions/conflicts created by the configuration of your hosting server vs your /includes/.htaccess file which is designed to prevent access to PHP files by unauthorized users. You could try temporarily renaming this file to htaccess_disabled and then if the problem is resolved, work with your hosting company to find other ways of protecting your files from unauthorized access. This will be unique to your hosting environment.

Sometimes it's due to having bad parameters in your configure.php file. But, since you're not willing to disclose a URL, there's little I can do to help further.

Check your <base href="xxxxxxxxxx" /> setting from View Source. Then check your stylesheet links. Then combine them in your browser URL and attempt to load just the stylesheet. Then deal with solving the errors that appear.

Again, your server errorlog should tell you more.

And ask your hosting company for assistance -- they should be intimately familiar with the security restrictions they're imposing on all their users.

[djkast]

I am having a very similar problem I can't seem to get over...

the site I'm working on: https://www.sunjo.ca

The links at the top and the links on the left, refer back to http://
but the catalog seems to work fine referring links to https

I have changed my configure.php file

define('HTTPS_SERVER', 'https://www.sunjo.ca'); // eg, https://localhost
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');
define('DIR_WS_HTTPS_ADMIN', '/admin/');
define('DIR_WS_HTTPS_CATALOG', '/');

//I also tried plugging this in:
define('ENABLE_SSL', 'true');



I've been receiving this error in my ssl_error log

[Thu Nov 16 11:48:18 2006] [error] [client 69.196.213.198] File does not exist:
/home/sunjo/sunjo.ca/shop/ie_css_fix, referer: https://www.sunjo.ca/

I get it with box IE and Firefox....

I'm completely lots for some reason my links are getting written as http://

-my home page opens as https but all my links are http and so when i click on them it loads the "unable to connect" page. (SSL is enable for checkout procedure)

Even when i click on the Home link, on my https homepage, it loads http homepage address in the address bar and again shows the "unable to connect" page.
And the admin area, its exactly the same, all the links are "http" so it never loads the pages ok.