SSL not set up right

[vinyardo]

Hi, I am having a problem setting up the secure part of my site, I hope someone can help!

The site is http://www.longtronics.co.uk
The secure site is https://secure.longtronics.co.uk

When you click on the "Log In" link, it shows the old "this page contains secure and non secure items" box (in IE) or an icon in the address bar (with no yellow bar) in Firefox.

There are no "src="http" links that I can see, all links and images are hard-coded. Having compared it to other secure sites, I am thinking it may be the css file that is causing the problem, but again I can't find any links!

Any help would be greatly appreciated!

[DrByte]

Who is your hosting company?

[vinyardo]

My hosting company is servage.net - I also got the SSL certificate through them.

[Website Rob]

The problem is the Domain name used for the Cert.

Your Domain: http://www.longtronics.co.uk/

Cert Domain: https://secure.longtronics.co.uk/

Because your Zen Cart is setup to use "www.longtronics.co.uk" and that's where all the page links point to, the Cert is showing/telling you that the information is unauthorized -- it comes from another Domain name.

What you need to do is have your Cert reissued to 'www.longtronics.co.uk".

[vinyardo]

Thanks, I'll try that and let you know if it works!

[vinyardo]

I've just heard back from my hosting company - they say it is not possible to change the certificate! Is there any way around this?!

[vinyardo]

I have tried changing the location of the secure directory from /www (root) to /www/secure and copying all the files to this directory, but still the same problem.

[Website Rob]

I'm not sure why your Cert was issued to "secure.longtronics.co.uk" but if any money changed hands, it could be money down the drain. Odds are you will need to purchase a new Cert with the correct Domain name.

[vinyardo]

I was under the impression that zen cart can be set up to work with any SSL space (even a shared space) or am I wrong?! Could I get around this by directing all traffic to the secure site, or would that just slow it down too much?

[DrByte]

I was under the impression that zen cart can be set up to work with any SSL space (even a shared space)

Yes, in most cases it can.
However, if the SSL is handled by a different server than the non-SSL processing, you will likely have problems.
If they are on the same physical server, there is usually not a problem unless the server's configuration is odd.

You must set the proper URLs and paths in your configure.php files for it to work.