how to use a shared ssl certificate?

[ewalker3]

im in the process of setting my store up.
where i have my site hosted, they offer the use of their shared ssl certificate.
can someone tell what i need to do to be able to take ordered over the shared ssl certificate? id like the orders to be placed in a file in a secured directory?

thanks,
ed

[jetx]

The problem using a shared cert is that your customers will get a "Security Error: Domain Mismatch", because your domain name doesn't match the cert of your hosting company. Always better to buy your own.

The SSL doesn't put your files in a secure directory, it's only used for secure login and secure form submissions.

[Kim]

https://www.zen-cart.com/tutorials/index.php?article=14

The above FAQ should help you set up your site to use a shared certificate without getting any errors.

[jetx]

Cool.. that's something I didn't know.

So does that mean the "YOUR_SECURE_SERVER.net" refers to the authenticating company which issued the certificate? Or is it the hosting company the certificate resides on?

[enigma777]

It is the hosting company your cart resides on.

[enigma777]

A good example would. Lets say your hosting company is mansoortech.com and they have a shared ssl for their account holders to use. Lets also assume you have an account with them and the name of the account is "jetx".

To use the shared ssl you would write

https://mansoortech.com/~jetx

Hope that helps. Do read the FAQ carefully because there are three major different ways SHARED SSL is setup on web hosts.

Regards,
Jeff.

[jetx]

Thanks enigma, stirs a recollection that I once briefly read about it.. and dismissing it for that reason.

[gaukler]

So far as I can tell, I've followed the instructions in the tutorial, this thread, and from my ISP, but I'm getting the mismatch error. My almost live cart is at http://www.medievalwares.com/zt/ . I've changed both configure.php files, and set both catalogue and Admin to SSL= true. Suggestions?
mark

[Ajeh]

Did you check with your hosting site that this shared certificate is setup correctly and that they have given you the right URL to work with?

[gaukler]

From the islandnet.com FAQ:
"All our web servers are configured with a high-security SSL certificate and customers may take advantage of this to provide encrypted access to their site at no extra charge. However, because security certificates are tied to a specific domain name, visitors to your site will get a security warning if you try this with your own domain name. Instead you should use an URL of the format https://www.islandnet.com/~YourUserName. That will avoid the security warning because the URL is constructed with the same domain name as the certificate. "
That's the format I've used, and it's what is showing up on the browser.
mark