ssl certificates

[topaz07]

I have very little knowledge in regards to ssl certificates other than it is needed to protect sensitive information. Doing some research ive found that probably the most affordable for me at the moment is the basic rapid ssl one.

(Stable, 128/256 bit single root install SSL certificates ideal for lite ecommerce.)



Reading product comparisons on it, it stated that it’s good for low traffic where the order is less than $50. My products start from $45

Since my customers will be using pay pal for the actual payment, is the rapid ssl certificate sufficient just to secure their personal details when they sign up before they leave my website to pay through paypal

thanks in advance

[Website Rob]

It would do the job.

Might be best though to discuss with your Hoster as they will be the ones setting up the SSL and will need to discuss certain information with you anyway.

You can get a good Certificate (256 bit encryption0 from GoDaddy for less than $50 yr.

[SonyaT]

How about when installing a cart? How does that work when setting up the cart and you have a SSL set up with your domain? Do you just click yes on the ssl ? Or is there a bit more to it?

[Website Rob]

With any script that allows for the use of an SSL connection, always best to first verify the Cert is installed and functioning correctly for your Domain name / Hosting account, before enabling it.

If in doubt, contact your Hoster.

[SonyaT]

yup they sent me an email stating its installed and working. And that the dedicated IP server had to resolve and then it was ready to go. And it resolved a few hours ago. I think the only question I have though is I am about to install the store and I know at one point it asks if its a SSL store and I wanted to know is there anything in particular I have to do to make it work properly?

[Website Rob]

In both the Zen Cart config files it asks to define the 'HTTPS_SERVER' - by including the URL. Provide the correct URL and make sure to set 'ENABLE_SSL' to true, in both files.

[SonyaT]

Thank you so much Rob. You rock. I have a client that is needing her store to be upgraded to a SSL site as soon as its completely installed and working. I guess that will be my next question. I should just do an upgrade and do the same in the config file.

[Website Rob]

'ENABLE_SSL' is simply a switch that one can turn ON or OFF at anytime.

If it is OFF then it doesn't matter if there is a Cert or not as an "https" connection will not be used.

If it is ON and no verification was to done to confirm the Cert works, then problems can occur.


Dedicated SSL Certs are usually easy to figure out: https://yourdomain.com/ either works or it doesn't.

Shared SSL Certs can be tougher to sort out. The URL is different and must be provided by the Hoster.

In both cases, if there is a problem with verifing then best to contact the Hoster.