Need Help Properly Applying SSL to Checkout

[Bahnstoermer]

Hi everyone,

I just got off the phone with my hosting company to confirm my SSL is properly installed, and manually replacing http with https on seemingly any one of my pages works (ie, the page loads and the lock is shown in IE, etc).

My question is that I can't seem to get it to enable "automatically" as I proceed through the checkout with a test order. My site is structured as

MY_SITE (all html)
MY_SITE/catalog (zencart directory)

I have installed the authornize.net payment module in testing mode, modified both configure.php files according to: https://www.zen-cart.com/tutorials/index.php?article=14 for a certificate of my own (which I have)

They are:

define('HTTP_SERVER', 'http://MY_SITE.com');
define('HTTPS_SERVER', 'https://MY_SITE.com/catalog');
define('HTTP_CATALOG_SERVER', 'http://MY_SITE.com');
define('HTTPS_CATALOG_SERVER', 'https://MY_SITE.com/catalog');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'false');

and:

define('HTTP_SERVER', 'http://MY_SITE.com');
define('HTTPS_SERVER', 'https://MY_SITE.com/catalog');
define('HTTP_CATALOG_SERVER', 'http://MY_SITE.com');
define('HTTPS_CATALOG_SERVER', 'https://MY_SITE.com/catalog');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'false');

It seems the https should be enabled from the first page you're supposed to enter CC info until the transaction is done, but this is not the case. I do get an https: but only at the very last page where it attempts to contact authorize.net and it of course errors out because I'm using their test CC number. This page is after the CC number has already been entered which seems to suggest this isn't right at all.

Can someone help out with this? Thanks!

[kobra]

Your config postings are the same and these files are not the same....Hopefully you just mispasted the content...

A link is helpful

[Bahnstoermer]

Sorry about that and thanks for the help...

I found the problem after copy / paste into this forum LOL. A file permission error wasn't allowing overwriting of the file.

[poolprorich]

Hello your admin file at the top should look like this:

 define('HTTP_SERVER', 'http://www.YOUR_SITE.com');

  define('HTTPS_SERVER', 'https://www.YOUR_SITE.com');

  define('HTTP_CATALOG_SERVER', 'http://www.YOUR_SITE.com');

  define('HTTPS_CATALOG_SERVER', 'https://www.YOUR_SITE.com');



  // Use secure webserver for catalog module and/or admin areas?

  define('ENABLE_SSL_CATALOG', 'true');

  define('ENABLE_SSL_ADMIN', 'true');

and if you have a subdirectory:

 define('HTTP_SERVER', 'http://www.YOUR_SITE.com/YOUR_DIRECTORY');

  define('HTTPS_SERVER', 'https://www.YOUR_SITE.com/YOUR_DIRECTORY');

  define('HTTP_CATALOG_SERVER', 'http://www.YOUR_SITE.com/YOUR_DIRECTORY');

  define('HTTPS_CATALOG_SERVER', 'https://www.YOUR_SITE.com/YOUR_DIRECTORY');



  // Use secure webserver for catalog module and/or admin areas?

  define('ENABLE_SSL_CATALOG', 'true');

  define('ENABLE_SSL_ADMIN', 'true');

And for catolog side: witch is located in includes/

// Define the webserver and path parameters
  // HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
  // HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
  define('HTTP_SERVER', 'http://www.YOUR_SITE.com');
  define('HTTPS_SERVER', 'https://www.YOUR_SITE.com');

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
  // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
  define('DIR_WS_CATALOG', 'YOUR_DIRECTORY/');
  define('DIR_WS_HTTPS_CATALOG', ''YOUR_DIRECTORY/');

  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
  define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
  define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

and if in a sub directory:

// Define the webserver and path parameters
  // HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
  // HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
  define('HTTP_SERVER', 'http://www.YOUR_SITE.com');
  define('HTTPS_SERVER', 'https://www.YOUR_SITE.com');

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
  // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
  define('DIR_WS_CATALOG', '/');
  define('DIR_WS_HTTPS_CATALOG', '/');

  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
  define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
  define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

[Bahnstoermer]

Hey thanks a lot, I'll go through these and see. It appears I am getting a strange secure/nonsecure transition in the site somehow. Hopefully it will be corrected by something you've posted and it's not due to my linking to an external home page.

[poolprorich]

you will get secure and non secure mesage from browser unless you call any external links as https://