SSL Enabled but product pages not under https

[divalyn]

Hi
I am new to this forum and also to ZC. I just followed the instructions for installing SSL on my server and enabling in ZC. I then had a problem with logging into Admin but I think I fixed that. Now, when I browse to my site at https://www.store.mydomain.com any product I select is not under the https:// rather the https://. Is that normal or do I have to change anything else?
Thanks for the help!

[DrByte]

That's normal.

Why do you want your products under SSL?

[divalyn]

Thanks. Just wasn't sure if I had set it up correctly. I'm also using only Paypal to process CCs so i guess from what I read I really don't even need the SSL anyway.

[DrByte]

Whether or not you collect CC data on your site is somewhat irrelevant. You *do* collect some sort of customer information, right? Thus you should be using SSL for customer-sensitive data.
And, if you have SSL properly configured on your Zen Cart site, it takes care of protecting sensitive pages automatically.

[divalyn]

how do i know if SSL is properly configured. It is i the first time setting up both ZC and SSL. the url is www.store.clvideo.com if you you have a chance to take a look.

thanks.

[DrByte]

It seems you've chosen to use a self-signed SSL certificate ... which, while it will protect customer data, may prove confusing to customers. Many customers have their browsers set to show SSL warnings when self-signed certificates are used.
You should get an SSL certificate from a trusted authority ... which means you'll have to pay for it.

But your general Zen Cart setup for SSL appears to be working.

[divalyn]

It seems you've chosen to use a self-signed SSL certificate ... which, while it will protect customer data, may prove confusing to customers. Many customers have their browsers set to show SSL warnings when self-signed certificates are used.
You should get an SSL certificate from a trusted authority ... which means you'll have to pay for it.

But your general Zen Cart setup for SSL appears to be working.

I did buy the SSL from godaddy (starfieldtech is the vendor). I didn't really mean for it to be selfsigned and quite frankly would not have known the difference except that I didn't get any prompts or notices that it is a self-signed cert. Should I have gotten something different and if so, is it worth it now to revoke the ssl and purchase and install a different one?

[Website Rob]

There are a few issues that all need to be dealt with.

You need a Dedicated IP address.
- current IP for your Domain name resolves to another Domain name

Choose your SSL Cert name carefully.
- might be better to get a Cert in the name of 'clvideo.com' so you can use it anywhere within your site
- not sure why you are using a Subdomain but if you do use one, you do not need 'www'
- a URL of shop.clvideo.com will also work as clvideo.com/shop

Get your Hoster to help with the Cert install.
- GoDaddy requires the use of a file (bundle.crt) that must be manually installed on the Server