SSL Certificate

[Bruce1952]

Hi all,

Just renewed my SSL certificate t0 the latest type with the green bar to show clients that we are secure but for some reason it is not showing in the address bar as shown in the instal text https://www.outdoorking.com/install.txt . It shows in the admin area sometimes but not in the online store. I am at a loss why it is not working as it should.

Note that I have checked both configure.php files in includes and admin/includes which are showing the correct information.

Any help would be appreciated.

[Ajeh]

You have some images that are not being called secure so the certificate will not show right ...

Example:
/images/Stock%20Take.jpg
/livezilla/image.php?a=605b3&id=3&type=overlay

[Bruce1952]

How do I run a check on the images and correct them?

[Ajeh]

If you use FireFox, you could click right on an image and click on View Image Info then sort on the address to see which images are not secure and fix those images ...

[Bruce1952]

I have thousands of images on the site and this would take a lifetime to sort out which images are causing the problem. When I right click it only shows the image location and name, not that it is faulty. How do I know that it is causing the SSL problem?

[frank18]

I have thousands of images on the site and this would take a lifetime to sort out which images are causing the problem. When I right click it only shows the image location and name, not that it is faulty. How do I know that it is causing the SSL problem?

It should show "https://...." and not "http://....."

You can find them also by viewing the page source and then doing a search for http://

[Bruce1952]

Frank,

Thank you for the reply regarding the https and http but what I am trying to figure out is why some pictures are doing this when I upload them. I am trying find out why it is doing it and correct it so it does not happen in the future.

This would be a very slow process to go through the thousands of images that I have, maybe someone can direct me to an easier way of doing it.

Thank you all for the advice so far.

[frank18]

Frank,

Thank you for the reply regarding the https and http but what I am trying to figure out is why some pictures are doing this when I upload them. I am trying find out why it is doing it and correct it so it does not happen in the future.

This would be a very slow process to go through the thousands of images that I have, maybe someone can direct me to an easier way of doing it.

Thank you all for the advice so far.

Bruce,

Nothing to do with the uploading of images, ZC does what it is configured to do.

Could you pls post the top part of both configure.php files just to make sure all is ok in these files.

Just need this part in your store configure.php file:

// Define the webserver and path parameters 
  // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com 
  // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com 
  define('HTTP_SERVER', 'https://yourdomain.com'); 
  define('HTTPS_SERVER', 'https://yourdomain.com'); 
 
// Use secure webserver for checkout procedure? 
define('ENABLE_SSL', 'true'); 
 
// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes! 
// * DIR_WS_* = Webserver directories (virtual/URL) 
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder) 
define('DIR_WS_CATALOG', '/'); 
define('DIR_WS_HTTPS_CATALOG', '/');

and this from your admin configure.php file

/** 
 * WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN: 
 * To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries: 
 */ 
  define('HTTP_SERVER', 'https://yourdomain.com'); 
  define('HTTPS_SERVER', 'https://yourdomain.com'); 
  define('HTTP_CATALOG_SERVER', 'https://yourdomain.com'); 
  define('HTTPS_CATALOG_SERVER', 'https://yourdomain.com'); 
 
  // secure webserver for admin?  Valid choices are 'true' or 'false' (including quotes). 
  define('ENABLE_SSL_ADMIN', 'true'); 
 
  // secure webserver for storefront?  Valid choices are 'true' or 'false' (including quotes). 
  define('ENABLE_SSL_CATALOG', 'true');

Cheers from up the road

[Bruce1952]

Frank,

Below is from the includes/config.php
<?php
/**
* dist-configure.php
*
* @package Configuration Settings circa 1.5.2
* @copyright Copyright 2003-2012 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
* @version GIT: $Id: Author: DrByte Wed Nov 6 20:54:59 2013 -0500 Modified in v1.5.2 $
* @private
*/
// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.yourdomain.com
define('HTTP_SERVER', 'https://www.outdoorking.com');
define('HTTPS_SERVER', 'https://www.outdoorking.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!

// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

Below is the admin/config.php file

<?php
/**
* @package Configuration Settings circa 1.5.3
* @copyright Copyright 2003-2014 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
* File Built by zc_install on 2014-09-24 12:43:15
*/


/*************** NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. ***********/
/*************** The 2 files should be kept separate and not used to overwrite each other. ***********/

/**
* WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN:
* To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries:
*/
define('HTTP_SERVER', 'https://www.outdoorking.com');
define('HTTPS_SERVER', 'https://www.outdoorking.com');
define('HTTP_CATALOG_SERVER', 'https://www.outdoorking.com');
define('HTTPS_CATALOG_SERVER', 'https://www.outdoorking.com');

// secure webserver for admin? Valid choices are 'true' or 'false' (including quotes).
define('ENABLE_SSL_ADMIN', 'true');

// secure webserver for storefront? Valid choices are 'true' or 'false' (including quotes).
define('ENABLE_SSL_CATALOG', 'true');

define('DIR_WS_ADMIN', preg_replace('#^' . str_replace('-', '\-', zen_parse_url(HTTP_SERVER, '/path')) . '#', '', dirname($_SERVER['SCRIPT_NAME'])) . '/');
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_ADMIN', preg_replace('#^' . str_replace('-', '\-', zen_parse_url(HTTPS_SERVER, '/path')) . '#', '', dirname($_SERVER['SCRIPT_NAME'])) . '/');
define('DIR_WS_HTTPS_CATALOG', '/');

[frank18]

Ok, that eliminates one possible issue.

Me thinks that you have hard coded links to external/internal pages or sites, just what Ajeh suggested in post #2 of this thread.

Looking at the source of your home page I am still seeing a number of http:// calls - but less than this morning.... so you must have made a change in the 2 configure.php files since my last post.

Examples:

<li><a href="http://www.outdoorking.com/forum/ubbthreads.php?ubb=cfrm" target="_blank">Repair Forum</a> | </li>
<li><a href="http://www.outdoorking.com/guestbook/gbook/gbook.php" target="_blank">Guestbook</a></li>

etc etc

If you go to your home page (or any page) and then right click your mouse you should see something like "View page source". Click that and you see the source code. Now do a search in that window for 'http://' (without my quotes). Whatever shows in that search is or are your problem(s) - these are hard coded links and that's what you have to fix.