Could SSL be pointing to wrong place?

Our SSL (https) is being pointed at our root folder. However, our store is located in a subdirectory called 'cart'. And... the main page within our root folder is being re-directed to an info page on our cart, until we've customized it further.

I keep having issues with shopping carts timing out, and I want to make sure my SSL is set up correctly.

Does it matter if the SSL is pointing to my root directory, even if our store (where we really need it) is located in a subdirectory?

I hope I explained that right. :dontgetit

KD

An SSL Cert is for a Domain name only. What dir. a script is located in or what URL you want to use makes no difference.

With regard to Zen Cart, once you setup the two config files to use correct paths, you should not have a problem.

Okay, that makes a little more sense. As far as the two configure files go... the one in my admin is slightly different than the one in my includes... and I'm not sure that I've got the settings right.

Does it matter if I put the www in there?

In my admin/includes/configure.php file I've got this:

define('HTTP_SERVER', 'http://www.eaglerockbooks.com');
define('HTTPS_SERVER', 'https://eaglerockbooks.com');
define('HTTP_CATALOG_SERVER', 'http://www.eaglerockbooks.com');
define('HTTPS_CATALOG_SERVER', 'https://eaglerockbooks.com');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

In my includes/configure.php file I've got this:

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
define('HTTP_SERVER', 'http://www.eaglerockbooks.com');
define('HTTPS_SERVER', 'https://eaglerockbooks.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

If anyone could give me feedback on this, it would be wonderful...

Lastly, in my google checkout admin settings I've got the callback set to this:

https://eaglerockbooks.com/cart/googlecheckout/responsehandler.php

And the Callback contents set to Notification as XML

(not sure if it was supposed to be XML or HTML?)

Thank you for your help, anyone... :smile:

KD

Your SSL Cert is created to use: https://www.eaglerockbooks.com

Therefore, any 'https' link must also use the same.

Most SSL certs are valid for just the domain specified. In many cases, subdomains are not secured.

My recommendation would be to move your store to the root of your site, especially since you're not using it anyway.

I switched all the https: to include the www. I did this in all three places, both of the configure files and also the callback in Google's integration section.

So it looks like I've got all of those addresses right?

Do you think that the fact my store is in a subfolder could really be causing the session expired page?

Is it a really complicated process to switch everything into the root directory?

Oh yeah.. after I put back in the www's I uploaded and tried again. Same results. :-(

Five minutes or less:

https://www.zen-cart.com/tutorials/index.php?article=122

Okay, I'm doing it now... I have a question about my index file(s). Now that I'm dumping the contents of my /cart folder into my root directory, I've been using the index.html file in my root directory as a page that then re-directs to an information page.

Do I want to delete the index.html whole file on the server side? I'm assuming the index.php and index.html would conflict with each othe somehow.

Thank you, alot, for the feedback and help.

-KD

KismetDesign:

I switched all the https: to include the www. I did this in all three places, both of the configure files and also the callback in Google's integration section.

So it looks like I've got all of those addresses right?

Do you think that the fact my store is in a subfolder could really be causing the session expired page?

Is it a really complicated process to switch everything into the root directory?

Oh yeah.. after I put back in the www's I uploaded and tried again. Same results. :-(

None of these things have anything to do with expiring sessions....

What are your setting in Configuration >> Sessions?

~Melanie

KismetDesign:

Do I want to delete the index.html whole file on the server side?
If you want 'index.php' to take priority then the answer is Yes.

When it comes doubt about using a particular file and/or replacing with another you are not will work properly, then rename the file on your Hosting account. This allows one to test the new changes/file and if things go wrong, you can rename the file back to what it was.

In this case, rename 'index.html' to 'index.html1' and it won't work anymore but easy to change back if you want to work again.

Sessions:
Cookie Domain - False
Force Cookie Use - True
Check SSL Session ID - False
Check User Agent - False
Check IP Address - False
Prevent Spider Sessions - True
Recreate Sessions - True
IP to Host Conversion Status - true

Thank you for checking this for me.

I'm still uploading the contents of the site into the root directory, an hour and a half later. :-) I couldn't just rename the cart folder to my root folder because I had so much other stuff in it.

Hopefully it will be done soon.... and hopefully without problems. :wink:

Ok... Those are correct.

You see the issue with expiring sessions has nothing to do w/ SSL... Rather if sessions are not assigned properly, then sessions expire and other session related things do not work.

I have visited your site 3x today on 3 different machines and have failed to get a single session ID... This is the problem.

Have you made custom changes in this area?

~Melanie

A session ID? I'm not sure I know what you mean when you say you've been unable to get a session Id?

I know my web hosting service changed my session directory to a new path... not sure if I should list it here? Or if it is even relevant?

I was just reading about how to set up the downloadable products... I think I have them all in right. But under configuration / attritube settings, I wanted to make sure that I had these settings right too...

Right now I have Download by Redirect on true, and Download by streaming on false. Is that what they are supposed to be on?

I wish this wasn't so difficult. Ugh....

I know my web hosting service changed my session directory to a new path... not sure if I should list it here? Or if it is even relevant?

Have them double check this path as you are not delivering sessions.

~Melanie

do you think that is the root of my problem?