Going Secured 'SSL' - Need a Definitive help.

[ikarus]

I have access to both HTTP and HTTPS via FTP.

1.) Does this mean I already have SSL through my host?

2.) Do I upload/install my zen-cart files in HTTP or HTTPS?

3.) Do I have to edit any configuration or files?

I am new to HTTPS and SSL let alone, but I need to get my site locked on security, so any tips or advice will be great!

[IDW]

Is your host offering you sharred ssl or did you buy a certificate?
Yes you will need to change the config files.

[KGZotU]

1. We can't really tell you just from this information alone. However, it costs money for an SSL certificate, so you'd probably know if you were paying for one.

2. You'd upload them over FTP. HTTP and HTTPS aren't built for transferring files.

3. During your installation you'll be asked if you'd like to use SSL. If you say yes at that time, then your config files will be edited appropriately. If you don't have a certificate at that time and install one later, then you'll have to edit the config files. This is simple though.

My advice, go ahead and install without SSL for the moment if you're eager to get started designing. Before you get serious, though, find out from your host if you have SSL, and if not how to get/install it. Then come back for directions on how to set up SSL post-installation.

I hope this helps,
Joe

[ikarus]

Ok I just confirmed with my host that I do indeed get shared SSL certificate and all that stuff. I already installed my zen-cart store and its running at the moment , so what is needed now to put this to become secured?

at the moment it is under HTTP.

Should I just install it into HTTPS or... is what i have enough.

thanks.!

[KGZotU]

I'll refer you to the relevant FAQ article:

https://www.zen-cart.com/tutorials/index.php?article=14

I've never used shared SSL myself, and I understand it can be a bit of a thorny issue, but the FAQ should give you the procedure.

Just a note on how ssl works, given your posts. All of this content is installed into and served from the same directory. Imagine that your server is a guy behind a service desk. People come up to him, and these people know both English(http) and Russian(https). Parts of their conversation with the guy can be in English, and parts can be in Russian. They can even talk about something in Russian and then talk about the same thing in English. Well, it's the same way with your content. It's only installed one place, but it can be served to your visitors in either an insecure protocol(http) or a secure protocol(https).

Good luck, I hope the FAQ answers your question.

--Joe

[ikarus]

Ah alright I figured out what you mean!

So I will just have to re-install everything under the secure protocol (HTTPS) and just run it on there.

Makes perfect sense now!

Thanks guys for all your help I really love the support on these things especially when its my first time using Zen-Cart and I am finally loving it.

[KGZotU]

So I will just have to re-install everything under the secure protocol (HTTPS) and just run it on there.

Makes perfect sense now!

Well, if you get this in time, the point of the story is that you don't have to re-install under https. (:

But, either way I'm glad you found it helpful. (;

Joe

[IDW]

I use shared ssl. In my root dir I have my zencart folder and another dir called ssl. My host told me I had to mirror the site in the ssl dir. This was a real pain. After spending hours talking to my host via email they installed a "symbolic link" to the ssl dir with automatically makes the zencart folder and the ssl folder the same. It works great.
Talk to host about shared ssl, Im sure they are all a little different

[ikarus]

OK..

i get a popup saying that the ssl certificate does not match my domain and that is problem some.. now i talked to my hosting and they said i had to redirect the link to some misc link,

oh well.

I just wonder how much secured does a non SSL store compared to a SSL one.

I need a shopping cart that has some secure pay, so is there any other way to ensure this that it works?

Ikarus

[KGZotU]

ikarus,

A store with SSL is /much/ more secure than one without. You can find other posts that sing the virtue of SSL, but the only payment method I'd use without SSL is PayPal Checkout Express. This would fulfill your requirements of secure pay, but you'd be losing customers as well.

Honestly, if you're going for a serious venture I think that non-shared SSL is a requirement. If it's a hobby or you're testing the waters then I'd say by all means use shared SSL and/or PayPal Checkout Express.

Hope this helps,
Joe