ssl problem

[ramblin54321]

First of all, thanks to Zencart for an excellent product and lots of online documentation.

I want it to work over a secure connection for checkout. I changed the configure.php file to enable ssl and I put in the https url. Now after clicking on "Go to Checkout" I get an error:
"Your session has expired" I did make sure that the cache folder has write permission. Any help to get ssl working on this cart would be greatly appreciated.

[Kim]

The URL?

[kobra]

Where is your site
What is the https url in your config

[ramblin54321]

the url is www.revelation7.co.cc/zencart
the secure url is https://nommos.sslcatacombnetworking.com/~revelati

[mprough]

Check that cURL is compiled with SSL support.

Note that your SSL pages are not secured
https://nommos.sslcatacombnetworking...ain_page=login

The encryption of these page's transmission is broken by unsecured elements within the page, in this case the images, such as http://revelation7.co.cc/zencart/inc.../HolyBible.gif is coded with an absolute url instead of a secured relative url like

/zencart/includes/templates/classic/images/HolyBible.gif

This could be an issue with your configuration.php file in the catalog section, but I suspect not.

Fact is, a 256 bit domain validated SSL will cost you $10.00 and there is not reason to mess around with shared SSLs.

~Melanie

[ecdiscounts]

First of all do you have a SSL Cert for the domain that you store is on IE: revelation7.co.cc? If not it's not going to work using someone elses SSL cert or one from another domain.

Second Are you doing Credit Card processing or using PayPal or a service like it where they are secure? If your not processing Credit Cards through a gateway there is no beed for a secure checkout.

[ramblin54321]

The paths for images and includes are relative paths. I tried changing them to https paths and the site wouldn't even show up in the browser. How do I fix the non-secure elements?

  // NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
  // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
  define('DIR_WS_CATALOG', '/zencart/');
  define('DIR_WS_HTTPS_CATALOG', '/zencart/');

  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
  define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
  define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

  define('DIR_WS_PHPBB', '/');

// * DIR_FS_* = Filesystem directories (local/physical)
  //the following path is a COMPLETE path to your Zen Cart files. eg: 

/var/www/vhost/accountname/public_html/store/
  define('DIR_FS_CATALOG', '/home/revelati/public_html/zencart/');

  define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
  define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
  define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
  define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
  define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');

[frank18]

I am with Melanie:

Fact is, a 256 bit domain validated SSL will cost you $10.00 and there is not reason to mess around with shared SSLs.

~Melanie

also see:

http://www.zen-cart.com/forum/showthread.php?t=147054

[ramblin54321]

My host does not have a ssl manager nor CSR nor CRT. It only has GnuPG. Can you recommend a low cost host that supports zencart with a private ssl?

In the meantime, I will have the checkout over http since paypal is secure. I was just hoping I could use the shared ssl to make the cusomers able to checkout and enter their registration information over https, I guess it is not possible with a shared ssl in my case.

[ecdiscounts]

My host does not have a ssl manager nor CSR nor CRT. It only has GnuPG. Can you recommend a low cost host that supports zencart with a private ssl?

In the meantime, I will have the checkout over http since paypal is secure. I was just hoping I could use the shared ssl to make the cusomers able to checkout and enter their registration information over https, I guess it is not possible with a shared ssl in my case.

No you can't do SSL on shared hosting nor share someone elses SSL Cert, sorry. But like I said unless you are processing credit cards through a gateway you do not need a SSL to process through PayPal Standard.