I'm building a new shop with v1.3.8a and I've found after installing the SSL I've got some very strange issues.

First of all I based my template on basically a blank classic template. I've made no changes what so ever to the tpl_login_default or the tpl_timeout_default.php files. They are from the fresh install.

The site is in a sub-directory vs. the root (while under-construction). The config files were originally set at: http: and https://mysite.com vs. http: and https://www.mysite.com - After installing the ssl which is configured for www.mysite.com, I went into both the config files and made the appropriate corrections (not really sure how they were set that way in the first place). After doing that, I cleared my cache and my http authentication on my browser and proceeded to login to the admin using https://www.mysite.com - no joy. I tried resetting the password by doing lost password request. New password did not work. In further testing I realized that i could no long log into the front end of the site either... all very strange.

So I tried a couple of different settings in the config files. Finally I was able to log back in, but only if I reverted back to https://mysite.com (no www). The same holds true with the login into the site itself to check out. Of course now I get the security warning as the SSL as I mentioned is configure for www.mysite.com -

This is the strangest thing I've ever seen. I have about 10 shops running on this server on various releases. This is the first on 1.3.8a. I've have never had this issue arise before.

I do have the fast and easy checkout, but I never get that far if I've have the config settings for www and none of the files mentioned in the forum regarding login security issues are modified by that module. The files modified and in my over-ride folder for that mod are the checkout_confirmation_default.php and the checkout_default.php - but this issue won't let me get beyond the login, so again, I don't believe that is the issue.

If someone could enlighten me I would really be thrilled. Here's a link to the site

The settings are currently set as http://www.mysite.com and https://www.mysite.com within both the catalog and the admin config files and the SSL is enabled.

Any clues anyone can throw my way, I would be very greatful