Site won't switch into SSL mode - using servage.net hosting

[Badvoc]

Have you cleared your browser cache and cookies?
Do you have a link to a page that is having a particular problem?

everything is working fine in the admin panel SSL is working

if I go to the site http://gothicmagic.co.uk and select login it will go to http://secure.gothicmagic.co.uk (to protect the users input) at that point the SSL padlock appears but has a red line through it.

I'll clear cookies and cache now.


I'm pretty sure it's the logo.gif as after clearing cookies and cache it was an ok padlock until it loaded the logo.gif, I just don't know anything about Zen or SSL, and I'm sure Kobra is right above but I don't understand what I need to do, I'm a bit thick me :)

[DrByte]

Who is your hosting company?

If it's network solutions, you're out of luck ... they've got a perfectly consistent bad track record in this arena.

[Badvoc]

servage.net

[DrByte]

Have you installed any addons that would have changed or customized these files? Or made any manual changes to these files?
- /includes/init_includes/init_file_db_names.php
- /includes/init_includes/overrides/init_file_db_names.php
- /includes/templates/ANY_TEMPLATE/common/html_header.php

[Badvoc]

I haven't changed any of them manually, I've installed the Lavender template which came with better categories mod

[kobra]

if I go to the site http://gothicmagic.co.uk and select login it will go to http://secure.gothicmagic.co.uk (to protect the users input) at that point the SSL padlock appears but has a red line through it.

As he is navigating to secure.gothicmagic.co.uk and he has the base install at gothicmagic.co.uk and the logo image there also - he gets the broken lock...

You did not need to move to secure.gothicmagic.co.uk to have this function but as your cert is now issued to it you could move the complete install to secure.gothicmagic.co.uk or get another cert issued to gothicmagic.co.uk or possibly have it re-keyed??

[DrByte]

No, the problem is that even though the link correctly starts in the browser as
https://secure.gothicmagic.co.uk/ind...ain_page=login
... the cart is unable to accurately detect that the page is served as SSL, and is therefore treating it as non-SSL internally, as evidenced by View Source:

<base href="http://gothicmagic.co.uk/" />

That only happens when either of the two files I mentioned is changed, or if the host is unable to pass on the fact that SSL is active on the given page.
If all the files are correct, then it's most likely a hosting problem ... and with your hosting company's track record, you may not have much success twisting their arm to help very much.

[kobra]

DrByte I see what you are referring to but also click the lock and see:

Connection Partially Encrypted
Parts of the page you are viewing were not encrypted before being transmitted over the Internet.
Information sent over the Internet without encryption can be seen by other people while it is in transit.

Probably more than one issue...

[Badvoc]

I'm not sure what to do now....

since I haven't put any stock or anything in yet perhaps the easiest route would be to delete and re-install Zen in https://secure.gothicmagic.co.uk

but then I guess that would have to be my shop url which isn't very nice.

But in short it looks like I cocked it up when I bought my SSL cert, it suggested secure in front of my url by default and I just went with it, live and learn I guess.s

[DrByte]

I see what you are referring to but also click the lock and see:

Connection Partially Encrypted
Parts of the page you are viewing were not encrypted before being transmitted over the Internet.
Information sent over the Internet without encryption can be seen by other people while it is in transit.

Probably more than one issue...

Right ... the non-encrypted components would be everything that's referenced with a relative path, such as images and stylesheets, since they're all based from the base href when they're not using an absolute URL.

Which means it all still boils down to the server not giving enough info about the fact that the page is running SSL, so Zen Cart cannot pick up on that fact and switch into the proper mode.