SSL address duplication

[jeanmichel]

That i had noticed and changed it before your reply. And it resolved the duplication problem

But it didnt help those facts:

-Still no stylesheet is attached to my pages, only to the admin area. (my admin area and admin catalog arent SSL enabled by choice. But to be able to enter my admin pages, i have to type "https://www.mysite.com/admin" otherwise it loads the "unable to connect" page)

-my home page opens as https but all my links are http and so when i click on them it loads the "unable to connect" page. (SSL is enable for checkout procedure)

Even when i click on the Home link, on my https homepage, it loads http homepage address in the address bar and again shows the "unable to connect" page.
And the admin area, its exactly the same, all the links are "http" so it never loads the pages ok.

So i'm trying to go the the "admin/configuration/sessions" in order to set the "check SSL_session_ID" option to What? True or false?

Is it possible that my domain ssl cert isnt activated yet?

[DrByte]

Is it possible that my domain ssl cert isnt activated yet?

I suppose anything's possible. What's your hosting company telling you?

[DrByte]

So i'm trying to go the the "admin/configuration/sessions" in order to set the "check SSL_session_ID" option to What? True or false?

Leave it at the default (False). This should SELDOM have to be changed. In fact, most of the "Sessions" settings should never be altered.

[DrByte]

Generally, the behaviour you're describing is not at all typical, especially when you have "ENABLE_SSL" set to 'false'.

What is your server's errorlog saying when you get the browser errors?

[DrByte]

-Still no stylesheet is attached to my pages, only to the admin area.

This is a result of the file being inaccessible. Sometimes this is due to .htaccess restrictions/conflicts created by the configuration of your hosting server vs your /includes/.htaccess file which is designed to prevent access to PHP files by unauthorized users. You could try temporarily renaming this file to htaccess_disabled and then if the problem is resolved, work with your hosting company to find other ways of protecting your files from unauthorized access. This will be unique to your hosting environment.

Sometimes it's due to having bad parameters in your configure.php file. But, since you're not willing to disclose a URL, there's little I can do to help further.

Check your <base href="xxxxxxxxxx" /> setting from View Source. Then check your stylesheet links. Then combine them in your browser URL and attempt to load just the stylesheet. Then deal with solving the errors that appear.

Again, your server errorlog should tell you more.

And ask your hosting company for assistance -- they should be intimately familiar with the security restrictions they're imposing on all their users.

[jeanmichel]

Thanks doc,

but i deactivated my secure hosting option on my server because the SSL cert i bought yesterday from godaddy is still in process, i just learned it through phone, which mean that they havent communicated yet with my hosting neither sent me my SSL cert.

And since i deactivated the secure hosting option, my site is now totally off the map. I May have just done something stupid, i dunno. But would i type in "http" or "https" the browser is unable to connect with the server.

Now i wrote to the support team and i'm just waiting for their reply.

Thanks anyway, i hope everything will be back in place soon.

[djkast]

I am having a very similar problem I can't seem to get over...

the site I'm working on: https://www.sunjo.ca

The links at the top and the links on the left, refer back to http://
but the catalog seems to work fine referring links to https

I have changed my configure.php file

define('HTTPS_SERVER', 'https://www.sunjo.ca'); // eg, https://localhost
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');
define('DIR_WS_HTTPS_ADMIN', '/admin/');
define('DIR_WS_HTTPS_CATALOG', '/');

//I also tried plugging this in:
define('ENABLE_SSL', 'true');



I've been receiving this error in my ssl_error log

[Thu Nov 16 11:48:18 2006] [error] [client 69.196.213.198] File does not exist:
/home/sunjo/sunjo.ca/shop/ie_css_fix, referer: https://www.sunjo.ca/

I get it with box IE and Firefox....

I'm completely lots for some reason my links are getting written as http://

-my home page opens as https but all my links are http and so when i click on them it loads the "unable to connect" page. (SSL is enable for checkout procedure)

Even when i click on the Home link, on my https homepage, it loads http homepage address in the address bar and again shows the "unable to connect" page.
And the admin area, its exactly the same, all the links are "http" so it never loads the pages ok.

[djkast]

Here is my Virtualhost directive in my httpd.conf in case this helps:

<VirtualHost 64.37.124.150:443>
DocumentRoot /home/sunjo/sunjo.ca/shop
ServerName www.sunjo.ca
ServerAdmin [email protected]
ErrorLog /etc/httpd/logs/ssl_error_log
TransferLog /etc/httpd/logs/ssl_access_log
SSLEngine On
SSLCertificateFile /home/sunjo/ssl/sunjo.crt
SSLCertificateKeyFile /home/sunjo/ssl/sunjo.key
SSLSessionCacheTimeout 300
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
</VirtualHost>

[jpwheelr2]

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
define('HTTP_SERVER', '');
define('HTTPS_SERVER', '');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

I did this, and it let everything work

NO address duplication : http://www.mysite.comhttps://www.mysite.com
and it also let the css and templates work again

My solution