Secure and Nonsecure items

using ff3 this is what I get

https://www.blackflameclothing.com uses an invalid security certificate.

The certificate is not trusted because the issuer certificate is unknown.

(Error code: sec_error_unknown_issuer)

* This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.

* If you have connected to this server successfully in the past, the error may be temporary, and you can try again later.

Moderator's Note - your 2 threads have been merged.

Thanks Kim!

Hi merlin, thanks for the feedback on that. Alot of people are telling me that they are getting this also. I have the hosting company looking into that.

But the pop-up of the non secure and secure items in IE is something that they said I need to fix and I just can't figure out.

Oh well I guess we will just have to pay someone to figure it out!

its most likely the same issue,
just that FF3 wont display it at all,

it looks like your ssl certificate is not intsalled at all

Ok the certificate appears to be installed correctly. I didn't get any errors on my end.

Now I just have to take care of the Secure and Nonsecure pop-up!!

good the cert seems to have been re-installed correctly

your non secure issue is this

http://www.blackflameclothing.com/catalog/includes/templates/classic/images/MERCHANDISE.png
http://www.blackflameclothing.com/catalog/includes/templates/template_default/buttons/english/button_login.gif
http://www.blackflameclothing.com/catalog/includes/templates/template_default/buttons/english/button_submit.gif

Merlinpa1969:

good the cert seems to have been re-installed correctly

your non secure issue is this

http://www.blackflameclothing.com/catalog/includes/templates/classic/images/MERCHANDISE.png
http://www.blackflameclothing.com/catalog/includes/templates/template_default/buttons/english/button_login.gif
http://www.blackflameclothing.com/catalog/includes/templates/template_default/buttons/english/button_submit.gif

So do I just change these to https:

Plus my big problem is I can't figure out where I need to make these changes. I looked in the categories section, I check ed in the tPL_header.php and I checked in the config but still nothing!

can you paste the top 40 or so lines of your includes/configure.php

the base href is set to non ssl when im on the login page

also have you made any changes to the /includes/templates/template_default/common/html_header.php ?

Sure no problem here is the copy from the includes/configure.php:

/*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. /
/**** The 2 files should be kept separate and not used to overwrite each other. ***********/

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
define('HTTP_SERVER', 'http://www.blackflameclothing.com');
define('HTTPS_SERVER', 'https://www.blackflameclothing.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/catalog/');
define('DIR_WS_HTTPS_CATALOG', '/catalog/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

define('DIR_WS_PHPBB', '/');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_CATALOG', '/data/17/1/147/88/1636740/user/1764431/htdocs/catalog/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');

// define our database connection
define('DB_TYPE', 'mysql');

and on the
/includes/templates/template_default/common/html_header.php

I don't seem to remember ever changing anything on that page. Here is the code:

<?php /** * Common Template * * outputs the html header. i,e, everything that comes before the \</head\> tag <br /> * * @package templateSystem * @copyright Copyright 2003-2006 Zen Cart Development Team * @copyright Portions Copyright 2003 osCommerce * @license <http://www.zen-cart.com/license/2_0.txt> GNU Public License V2.0 * @version $Id: html_header.php 6948 2007-09-02 23:30:49Z drbyte $ */ /** * load the module for generating page meta-tags */ require(DIR_WS_MODULES . zen_get_module_directory('meta_tags.php')); /** * output main page HEAD tag and related headers/meta-tags, etc */ ?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" <?php echo HTML_PARAMS; ?>> <head> <title><?php echo META_TAG_TITLE; ?></title> <meta http-equiv="Content-Type" content="text/html; charset=<?php echo CHARSET; ?>" /> <meta name="keywords" content="<?php echo META_TAG_KEYWORDS; ?>" /> <meta name="description" content="<?php echo META_TAG_DESCRIPTION; ?>" /> <meta http-equiv="imagetoolbar" content="no" /> <meta name="author" content="The Zen Cart™ Team and others" /> <meta name="generator" content="shopping cart program by Zen Cart™, <http://www.zen-cart.com> eCommerce" /> <?php if (defined('ROBOTS_PAGES_TO_SKIP') && in_array($current_page_base,explode(",",constant('ROBOTS_PAGES_TO_SKIP'))) || $current_page_base=='down_for_maintenance' || $robotsNoIndex === true) { ?> <meta name="robots" content="noindex, nofollow" /> <?php } ?> <?php if (defined('FAVICON')) { ?> <link rel="icon" href="<?php echo FAVICON; ?>" type="image/x-icon" /> <link rel="shortcut icon" href="<?php echo FAVICON; ?>" type="image/x-icon" /> <?php } //endif FAVICON ?> <base href="<?php echo (($request_type == 'SSL') ? HTTPS_SERVER . DIR_WS_HTTPS_CATALOG : HTTP_SERVER . DIR_WS_CATALOG ); ?>" /> <?php /** * load all template-specific stylesheets, named like "style*.css", alphabetically */ $directory_array = $template->get_template_part($template->get_template_dir('.css',DIR_WS_TEMPLATE, $current_page_base,'css'), '/^style/', '.css'); while(list ($key, $value) = each($directory_array)) { echo '<link rel="stylesheet" type="text/css" href="' . $template->get_template_dir('.css',DIR_WS_TEMPLATE, $current_page_base,'css') . '/' . $value . '" />'."\n"; } /** * load stylesheets on a per-page/per-language/per-product/per-manufacturer/per-category basis. Concept by Juxi Zoza. */ $manufacturers_id = (isset($_GET['manufacturers_id'])) ? $_GET['manufacturers_id'] : ''; $tmp_products_id = (isset($_GET['products_id'])) ? (int)$_GET['products_id'] : ''; $tmp_pagename = ($this_is_home_page) ? 'index_home' : $current_page_base; $sheets_array = array('/' . $_SESSION['language'] . '_stylesheet', '/' . $tmp_pagename, '/' . $_SESSION['language'] . '_' . $tmp_pagename, '/c_' . $cPath, '/' . $_SESSION['language'] . '_c_' . $cPath, '/m_' . $manufacturers_id, '/' . $_SESSION['language'] . '_m_' . (int)$manufacturers_id, '/p_' . $tmp_products_id, '/' . $_SESSION['language'] . '_p_' . $tmp_products_id ); while(list ($key, $value) = each($sheets_array)) { //echo "<!--looking for: $value-->\n"; $perpagefile = $template->get_template_dir('.css', DIR_WS_TEMPLATE, $current_page_base, 'css') . $value . '.css'; if (file_exists($perpagefile)) echo '<link rel="stylesheet" type="text/css" href="' . $perpagefile .'" />'."\n"; } /** * load printer-friendly stylesheets -- named like "print*.css", alphabetically */ $directory_array = $template->get_template_part($template->get_template_dir('.css',DIR_WS_TEMPLATE, $current_page_base,'css'), '/^print/', '.css'); sort($directory_array); while(list ($key, $value) = each($directory_array)) { echo '<link rel="stylesheet" type="text/css" media="print" href="' . $template->get_template_dir('.css',DIR_WS_TEMPLATE, $current_page_base,'css') . '/' . $value . '" />'."\n"; } /** * load all site-wide jscript_*.js files from includes/templates/YOURTEMPLATE/jscript, alphabetically */ $directory_array = $template->get_template_part($template->get_template_dir('.js',DIR_WS_TEMPLATE, $current_page_base,'jscript'), '/^jscript_/', '.js'); while(list ($key, $value) = each($directory_array)) { echo '<script type="text/javascript" src="' . $template->get_template_dir('.js',DIR_WS_TEMPLATE, $current_page_base,'jscript') . '/' . $value . '"></script>'."\n"; } /** * load all page-specific jscript_*.js files from includes/modules/pages/PAGENAME, alphabetically */ $directory_array = $template->get_template_part($page_directory, '/^jscript_/', '.js'); while(list ($key, $value) = each($directory_array)) { echo '<script type="text/javascript" src="' . $page_directory . '/' . $value . '"></script>' . "\n"; } /** * load all site-wide jscript_*.php files from includes/templates/YOURTEMPLATE/jscript, alphabetically */ $directory_array = $template->get_template_part($template->get_template_dir('.php',DIR_WS_TEMPLATE, $current_page_base,'jscript'), '/^jscript_/', '.php'); while(list ($key, $value) = each($directory_array)) { /** * include content from all site-wide jscript_*.php files from includes/templates/YOURTEMPLATE/jscript, alphabetically. * These .PHP files can be manipulated by PHP when they're called, and are copied in-full to the browser page */ require($template->get_template_dir('.php',DIR_WS_TEMPLATE, $current_page_base,'jscript') . '/' . $value); echo "\n"; } /** * include content from all page-specific jscript_*.php files from includes/modules/pages/PAGENAME, alphabetically. */ $directory_array = $template->get_template_part($page_directory, '/^jscript_/'); while(list ($key, $value) = each($directory_array)) { /** * include content from all page-specific jscript_*.php files from includes/modules/pages/PAGENAME, alphabetically. * These .PHP files can be manipulated by PHP when they're called, and are copied in-full to the browser page */ require($page_directory . '/' . $value); echo "\n"; } //DEBUG: echo '<!-- I SEE cat: ' . $current_category_id . ' || vs cpath: ' . $cPath . ' || page: ' . $current_page . ' || template: ' . $current_template . ' || main = ' . ($this_is_home_page ? 'YES' : 'NO') . ' -->'; ?> </head> <?php // NOTE: Blank line following is intended: ?>

Maybe I should pay someone to take care of the problem!

who is the host?

This has been seen before on at least one host,
try running a search on your host and see if you find the same issue

Network Solutions

I will try to do a search on Network Solutions ASAP!!

Ok I did a search on Network Solutions and would you beleive it I did find something about SSL and network solutions! Also you were in the conversation Merlin!

I'm using ZenCart v. 1.3.7. Two days ago I noticed that when trying to access a secure page (such as login) I am getting a popup with warning that the page I'm trying to open contains both secure and non secure items. For the past two days I've been checking all my images, banners and links. In the past I got this message from time to time but it was easily remedied by providing secure link for images.
Could someone please help me?
http://www.all4coffee.com

I did check both configure.php files and the html_header file. They seem to be OK. Also I got the mixed content message only in IE. Firefox works OK

http://www.all4coffee.com/includes/templates/iC_AcadameV1.2/images/boxlistbg.png

this is on the login page

that is your problem

Thanks! I will now search for the location of this file and fix the link. I hope this works.

Yes - it did work, Merlin - thanks again.

Would you happen to know the aswer to my post at the bottom of the page at
http://www.zen-cart.com/forum/showthread.php?t=85214&page=3

(I know that this is a diffenet topic but nobody aswered me there...)

I am experiencing the problem of IE displaying the "non secure and secure" error message as well. The site is http://www.ebookmaniac.net

In FF everything works, but it seems that IE is in fact not even showing the padlock in the toolbar (if I choose to display the non secure items).

I have checked my config files as suggested in this thread and they are identical, with the www.

If I set IE to not display the non secure items, it turns out there are two images that disappear. A guarantee logo and (ironically enough) the SSL certificate logo.

Are they the trouble here? If so, how do I correct the issue?