SSL Problem

[Royal]

Hello abs007,

You are very welcome!

I'm here if you need me. Take it easy.

[bolingbrook]

Hi, I am using zen cart 1.38, i'm working on this site www.furqaanbookstore.com

I have setup the configuration files in /includes and /admin/includes to enable SSL. But when I go to checkout, it still only goes to HTTP rather than HTTPS.

Help me plsssss

[abs007]

Hi boling brook

please check both your files

includes>configure.php you should have these set

define('HTTPS_SERVER', 'https://www.furqaanbookstore.com');

// Use secure webserver for checkout procedure?define('ENABLE_SSL', 'true');

and then in admin>includes>configure.php

define('HTTP_SERVER', 'http://www.furqaanbookstore.com');
define('HTTPS_SERVER', 'https://www.furqaanbookstore.com');
define('HTTP_CATALOG_SERVER', 'http://www.furqaanbookstore.com');
define('HTTPS_CATALOG_SERVER', 'https://www.furqaanbookstore.com');


define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

you should be fine to go then

[bolingbrook]

hei, it works! Now the issue is the exclamation mark "this page includes other resources which are not secure..." Is this a major concern?

[customgiftsshoppe]

I was having trouble with my SSL not working.
I found it was because I have a merchant seal in my footer.
So, I saved the merchant seal in my images folder, then did a quick jump.php page.
That fixed the SSL problem.

[newagekat]

Hi:

I'm running v1.3.8a with all patches and securities. I've had SSL on this site for a long time, so in includes/configure.php the following is set:

// Define the webserver and path parameters
  // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
  // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
  define('HTTP_SERVER', 'http://customironworks.com');
  define('HTTPS_SERVER', 'https://customironworks.com');

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

In admin/includes/configure.php, these are the settings:

define('HTTP_SERVER', 'http://customironworks.com');
  define('HTTPS_SERVER', 'https://customironworks.com');
  define('HTTP_CATALOG_SERVER', 'http://customironworks.com');
  define('HTTPS_CATALOG_SERVER', 'https://customironworks.com');

  // Use secure webserver for catalog module and/or admin areas?
  define('ENABLE_SSL_CATALOG', 'true');
  define('ENABLE_SSL_ADMIN', 'true');

Recently, the client switched to a new SSL provider (rapidSSL). They place the colored band (in Firefox) next to the favicon as well as the padlock in the status bar.

I can access the admin and the band and padlock are clear, but when I access the catalog, i get a flash of the blue bar then it disappears and the padlock has a warning of Unauthenticated Content. All images are relative, even the hand coded ones.

Does anyone know what I missed?

kp

[kobra]

newagekat,

Your google-analytics urchin tracking code is http

<script src="http://www.google-analytics.com/urchin.js" type="text/javascript">

[newagekat]

Kobra:

you're a lifesaver. The client got someone to help with Marketing and page ranking. I did not realize that was there. Thank you.

Without appearing really stupid, how did you find it? I viewed source and did a search for http: and there were a lot of results, but I assumed that Zen Cart identified them as secure in some manner.

BTW, what is a jump.php? it's mentioned by customgiftsshoppe on this post.

[kobra]

Most of your http references are links and not excecuted The google code is a script that is http and being run on a secure page
A custom - I suppose - tpl_main_page.php in your template named for these secure pages without the google code would be an option

[newagekat]

Kobra:

One last stupid question. I work on Mac so I'm unfamiliar with IE except to say: thank God for v8.

the certificate is now running properly and displaying the padlock and the Blue bar (in Firefox). in IE, i get this

To help protect your security, Internet Explorere has blocked this website from displaying content with security certificate errors. Click here for options...

I realize this may be a default setting in IE, but for the lay person, and there are still a lot, is there a workaround for this?