Page 1 of 2 12 LastLast
Results 1 to 10 of 15
  1. #1
    Join Date
    Mar 2007
    Location
    Taiwan
    Posts
    241
    Plugin Contributions
    0

    Default Basic questions for SSL

    I've never used SSL before and have some basic questions. I bought an SSL certificate and asked my hosting company to generate the CSR.

    In response they sent a form asking for basic information, but the first line of the form was:

    Host to make cert for : secure.mydomain.com

    This looks like a subdomain. If so, will I have to duplicate my ZC folder into the 'secure' folder?

    I've already used close to half my server space on my ZC folder, so if I have to duplicate it I will need more server space.

    Or can I use a redirect or rewrite?

    I've searched through the forum here and found this message:
    As you are using one of those antiquated two-folder systems (one for http and another for https) then to secure all of 'admin' behind ssl only have the 'admin' folder in the httpsdocs folder and delete it from the httpdocs folder.
    This seems to imply that I don't have to have the whole ZC directory in the secure folder. Is that right?

    Is my hosting company antiquated?

  2. #2
    Join Date
    Jun 2005
    Location
    Cumbria, UK
    Posts
    10,262
    Plugin Contributions
    3

    Default Re: Basic questions for SSL

    Quote Originally Posted by paul3648 View Post
    I've never used SSL before and have some basic questions. I bought an SSL certificate and asked my hosting company to generate the CSR.

    In response they sent a form asking for basic information, but the first line of the form was:

    Host to make cert for : secure.mydomain.com

    This looks like a subdomain. If so, will I have to duplicate my ZC folder into the 'secure' folder?

    I've already used close to half my server space on my ZC folder, so if I have to duplicate it I will need more server space.

    Or can I use a redirect or rewrite?

    I've searched through the forum here and found this message:
    As you are using one of those antiquated two-folder systems (one for http and another for https) then to secure all of 'admin' behind ssl only have the 'admin' folder in the httpsdocs folder and delete it from the httpdocs folder.
    This seems to imply that I don't have to have the whole ZC directory in the secure folder. Is that right?

    Is my hosting company antiquated?
    As you have bought your own SSL certificate, you will choose to install it on one of two domain options:

    1. https://mywebsite.com
    2. https://www.mywebsite.com

    Notice the difference? One is WITHOUT www, and the other is WITH www.

    Your host must now generate a CSR according to your requirements, these being:

    EITHER 1, or 2 above.

    Your host will require corporate / company / personal information and addresses, and you will also supply a desired password for the certificate.

    It is STRONGLY ADVISED that the information you supply CORRESPONDS with the WHOIS information recorded for your domain. A certificate issuer will require lots of additional documentation if the certificate is requested for an organisation that does not match the info on the WHOIS.

    You submit the CSR to your certificate issuer.

    They generate the certificate and e-mail it back to you.

    You forward this to your host and they install it.

    Once installed, you MODIFY the https settings in both CONFIGURE.PHP files.
    19 years a Zencart User

  3. #3
    Join Date
    Mar 2007
    Location
    Taiwan
    Posts
    241
    Plugin Contributions
    0

    Default Re: Basic questions for SSL

    Thanks for that speedy and detailed reply. I still find it puzzling that my host prefilled the form as 'secure.mydomain.com'

    I've sent them an email for clarification.

  4. #4
    Join Date
    Mar 2007
    Location
    Taiwan
    Posts
    241
    Plugin Contributions
    0

    Default Re: Basic questions for SSL

    Just as a follow up - my host says I can use 'www.mydomain.com' - so everything seems set to go.

    The thing that threw me off here was their suggestion to use the subdomain 'secure'. It still seems like a weird suggestion, but perhaps having a distinct subdomain for secure connections is a standard procedure. I don't know...

  5. #5
    Join Date
    Jun 2005
    Location
    Cumbria, UK
    Posts
    10,262
    Plugin Contributions
    3

    Default Re: Basic questions for SSL

    Quote Originally Posted by paul3648 View Post
    Just as a follow up - my host says I can use 'www.mydomain.com' - so everything seems set to go.

    The thing that threw me off here was their suggestion to use the subdomain 'secure'. It still seems like a weird suggestion, but perhaps having a distinct subdomain for secure connections is a standard procedure. I don't know...

    No.. that's NOT standard. What I pointed out (eg: https://www.mysite.com) is "standard". And if your main/general domain address is "www.mysite.com then you have made the right choice for the cert.
    19 years a Zencart User

  6. #6
    Join Date
    Apr 2007
    Posts
    3
    Plugin Contributions
    0

    Default Re: Basic questions for SSL

    Quote Originally Posted by paul3648 View Post
    This seems to imply that I don't have to have the whole ZC directory in the secure folder. Is that right?
    Im not trying to hijack the thread but I have a same question. So you don't need to copy ZC to secure folder? My hosting have different folder for https, its /SSL/ folder while for non secure use /public_html/

    Ty

  7. #7
    Join Date
    Mar 2004
    Posts
    16,042
    Plugin Contributions
    5

    Default Re: Basic questions for SSL

    hanyo, if your host has 2 seperate folders then you will need to have copies in both
    Zen cart PCI compliant Hosting

  8. #8
    Join Date
    Apr 2007
    Posts
    3
    Plugin Contributions
    0

    Default Re: Basic questions for SSL

    Quote Originally Posted by Merlinpa1969 View Post
    hanyo, if your host has 2 seperate folders then you will need to have copies in both
    Aww so I need to add product twice too? since the picture will be stored at different folder

  9. #9
    Join Date
    Mar 2004
    Posts
    16,042
    Plugin Contributions
    5

    Default Re: Basic questions for SSL

    no, but you will need to update the images folder in the Secure folder when your done uploading products
    Zen cart PCI compliant Hosting

  10. #10
    Join Date
    Jun 2004
    Posts
    52
    Plugin Contributions
    0

    application error Re: Basic questions for SSL

    Quote Originally Posted by hanyo View Post
    Im not trying to hijack the thread but I have a same question. So you don't need to copy ZC to secure folder? My hosting have different folder for https, its /SSL/ folder while for non secure use /public_html/

    Ty
    That's an odd configuration.
    That implies that a cert will need to be issued for the parallel web root "ssl", since any content within that folder will be considered secure...

    I would ask more questions before swallowing that one.

    Certs can only point to the main web root or a specific sub-domain. Hosts that purport to work differently should be scrutinized before proceeding - otherwise you are just tossing your money for a cert that is not going to function as advertised.

 

 
Page 1 of 2 12 LastLast

Similar Threads

  1. some basic questions
    By dunchutch in forum General Questions
    Replies: 10
    Last Post: 8 May 2010, 06:10 PM
  2. basic questions
    By outeredge2 in forum Templates, Stylesheets, Page Layout
    Replies: 5
    Last Post: 5 Apr 2010, 05:25 PM
  3. Most basic of questions
    By mpierich in forum General Questions
    Replies: 3
    Last Post: 21 Nov 2009, 05:21 PM
  4. Some very basic questions from a very basic noobie
    By wellnessclub in forum General Questions
    Replies: 9
    Last Post: 5 May 2009, 04:39 PM
  5. Basic Questions
    By AngelT in forum General Questions
    Replies: 0
    Last Post: 26 Oct 2006, 11:50 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR