Base HREF https issues

Website Rob:

Things I have noticed.

• SSL Cert is issued to sourcetech.co.uk
• site does not work without the 'www' in the URL
• invalid characters in JS starting at line 96 of page output
  );
  //îòñëåæèâàíèå äîïîëíèòåëüíûõ ýëåìåíòîâ
  //addListener(document.getElementById('element-id'),

Fixing all of the above will help to sort out some or even a lot, of problems.

The SSL is issued to the www... Non www links are not displayed, but rather 404 as no redirect exists either.

~Melanie

• SSL Cert is issued to sourcetech.co.uk << this is easily confirmed

• site does not work without the 'www' in the URL << this is an incorrect setting in Apache

Another error noticed.

Access denied to http: //www. sourcetech. co.uk/shop/csshover.htc
(link seperated to prevent SE indexing)

Website Rob:

• SSL Cert is issued to sourcetech.co.uk << this is easily confirmed

• site does not work without the 'www' in the URL << this is an incorrect setting in Apache

Maybe I am missing something...

Website Identity is listed as https://www.sourcetech.co.uk

The sourcetech.co.uk is the common and organizational name. The token is also sourcetech.co.uk, but this is a GoDaddy dumb thing.

Also, GoDaddy doesn't supply the canonical url in the certificate fields. Also, oddly, says it has the CA bundle, but does not appear to have it installed.

All these things led me on a hunt..... I think the SSL is not installed correctly and it may be the result of the server DNS configuration.... On trace the site pulls no IP or route. On lookup no IP either.... and there are no authority records. Then there is this ....

The server name or address could not be resolved
SSL request - No headers downloaded

and this

Ping

[sourcetech.co.uk]

Bad destination
Bad destination
Bad destination
Bad destination
Bad destination
Bad destination
Bad destination
Bad destination
Bad destination
Bad destination

Average time over 10 pings: 0 ms

Suggest the DNS be resolved correctly and the certificate reinstalled... with the CA it will need an IP and it has none.

~Melanie

mikebackhouse:

Who's the hosting company? We are!! We have our own webserver in a rack locally
Do you have any other domains configured for SSL use, on the same server? Or is SSL entirely new for you?

Hi Drbyte.. yes, this is completely new to us!

My MD is actually in charge of installing it etc.. and this is the first one we've done (that I'm aware of)

So it seems from mprough's comments that the SSL is installed incorrectly.

We've now had the domain name updated, so sourcetech.co.uk will forward to www. so that should all be working

Ok, stupid question of the day! - What does csshover.htc do? I have several zen cart sites set up, and NONE of them have this file, neither does my zen cart install folder or any of my templates! What does this do exactly? :wacko:

UPDATE: I've just noticed the csshover.htc file was in the includes folder, so now moved it to the route folder. is this going to help?!

One of the common SSL config mistakes I've seen is in relation to OpenSSL support not being enabled properly. And, of course, as others have mentioned, incorrectly configured or installed SSL certificates.

If you need assistance properly setting up SSL support on your own self-managed server, I recommend discussing it someplace where hosting and server configuration are the primary focus of discussion ... perhaps such as webhostingtalk.com

Once SSL is working correctly, your Zen Cart should automatically use it (when your configure.php settings are set to use it).

Hi all.. just been having a think.

Our web server runs IIS, and to get apache to work on it, we installed a program called "IIS MOD-RE WRITE" which tells IIS where to look for the website. Within the config file is a hard coded link to our website, I'm wondering if this might have something to do with the problems I'm having with my SSL certificate?

Has anyone ever come across IIS MOD-RE WRITE before?

DONE!! :clap::clap:

I can't really believe how I managed to fix it, in the configure.php file, I changed the http:// to https:// and its now working! How? Why? I have no idea!

define('HTTP_SERVER', 'https://www.sourcetech.co.uk');
define('HTTPS_SERVER', 'https://www.sourcetech.co.uk');

Thanks for all your help everyone! :smile:

So, now you're running your entire site in SSL?

I wouldn't call that a fix at all.
It may be a workaround, but certainly not a fix.

Did you try disabling your IIS addon for mod-rewrite simulation?

Oddly enough, my boss has just pointed out that the whole site is running SSL and wants that changing! I hadnt realised, but of course makes perfect sense!

So, back to square one. The IIS-mod Rewrite is a program running on our server which links the Apache server (running our zen cart sites) to IIS. We're looking to change the server soon to run soley run Apache. So if I disable it, it will kill all our Zen cart sites! not a great idea ;)

During my investigations I couldnt see any reason why this bit of software would prevent the SSL from running... :no:

mikebackhouse:

The IIS-mod Rewrite is a program running on our server which links the Apache server (running our zen cart sites) to IIS.
Um ... I "get" that IIS-mod-rewrite is akin to the apache mod-rewrite capability.

What I don't get is what you mean by "which links the Apache server to IIS".
If you're running BOTH Apache and IIS on your server, I'm not surprised that things are confuzzled, and would recommend you engage the services of a professional who has a specific understanding of the technical complexities of what you're doing and why ... and determine whether you really need to make it as complicated as it sounds like you've got it.

See, the problem is, we have a web server running which we've had for a while and need it to run IIS due to older websites we have on there, and that my MD has a good understanding of Microsoft technologies..

When we decided to go down the zen cart route, it became apparent that IIS wouldnt work with mysql etc.. So my brother came in (who has had over a decade of working with apache servers and is a general geek/software developer!) and installed apache, but of course this needed to link in with the existing IIS server, the only way of doing this was to install the IIS-mod rewrite (micronovae.com/ModRewrite/ModRewrite.html)

I realise this is a completely upside down way of doing it, in a perfect world we would have shut the server down, installed Apache from scratch, and installed IIS ontop of it, but that would have lead to too much downtime for our, and our customers websites.

Anyway, waffle over, bottom line is I cant see any reason why it should be creating any HTTPS issues as it clearly DOES work, just not how we would like it!

Hi All.. Still having problems

The current issue is that by setting the whole site to SSL, its putting a massive load on our server..

Does anyone have any suggestions? I'm wondering if its something to do with the images on the site? Is the image folder secure? Could Image Handler be the issue?

PLEASE HELP!! :no:

I'd be surprised if images were the sole problem; granted, ImageHandler does create additional PHP load on the server.

I'm still inclined to say that your problems are more specifically related to your server config.

mikebackhouse:

... it became apparent that IIS wouldnt work with mysql etc..
I'm not sure how you came to that conclusion. In its default configuration, installing PHP and the PHP connector for MySQL should make MySQL available to PHP, which in turn allows PHP scripts running from IIS to be able to access the database fine.
Granted, if you've got something else amuck, maybe that's interfering with the normal operation in additional ways also.

AAGGHH!!!.. my last remaining option for getting the damn SSL working hasnt worked!

I thought it would be the IIS ModRewrite, as it has a hard-coded link to http://www.blahblah...

But I have been informed by the software developers that this isnt the issue :no:

So, I've now switched off any sideboxes that contained hard coded http: links, been through the whole site checking for any hard coded links and got my server guy to re-install the SSL certificate..

And I'm still in exactly the same situation.. Please please can someone help me? I'm at a total loss, I either have SSL running on EVERY page of the site, creating a HUGE drag on our webserver and slowing our website down, or I only have it on the checkout but with errors, either way its going to lose customers... please please help! :(

Mike... we sympathise... but the one person who can help you (DrByte) has tried and given that you have a unique "arrangement" on your server, little more can be done without having direct access to the server - and I imagine that you'll need a guru to look into the issues.

How imperative is it that you host the ZC store on this server? Perhaps hosting on another server (incl box) may be the better option.

Consider even, hosting with someone else... ?

Ok.. It's not VITAL that its hosted on our own servers.. just a LOT more convenient! I really have no idea what's happening, but I will carry on..

We have a few ZC sites running on the server with SSL certifs.. and each one is having issues, so it must be something server-side. Ah well..

Thanks for all your help everyone.. looks like I must go-it alone! :P