Please tell me if you can load my https URL (can't resolve secure URL)

Hello,

I installed an SSL certificate on Thursday night, and according to my hosting company, Media Temple, it is installed and working and they can load the https URL.

They told me it can take up to 24 hours for my ISP to refresh their cache before I can resolve the URL, but it's been almost 72 hours and I still can't. It just redirects back to http://frangadesigns.com when I try to load https://frangadesigns.com

If someone could please see if they can load this secure URL -- not redirecting to non-secure -- on your internet connection and let me know, I'd really appreciate it. (I know I have a lot of issues with hardcoded/non-secure content, but I'll deal with that after.)

https://frangadesigns.com

What my hosting company wrote:

Whenever you install an SSL certificate on a (gs) Grid-Service, it is switched from a shared IP address to a unique IP address. After this switch, it may take at least 12 hours for the new IP address to be propagated thorought the internet. This is due to the previous IP address (assigned with the .gridserver.com certificate) is cached at your ISP or upstream provider. During this time your non-secure domain will continue to resolve as normal.

I can confirm that your (gs) Grid-Service has been switched from 72.47.224.136 (shared) to 72.47.225.38 (unique) and because I have never visited your domain, I do not receive the cached version of the domain.I have tried the following:

• Clearing browser cache, history, cookies, etc.

• Firefox, IE 8, Chrome, Opera, SeaMonkey

• ipconfig /flushdns

• Disconnecting and reconnecting my LAN connection

• I DO have a router, but can't figure out how to connect to the modem without it because it can't renew my IP (my cousin installed it for me)

• Contacting my ISP (Charter) customer service, which was not helpful.
  My specs:

• Zen Cart v.1.3.8a (upgrading soon)

• Server OS: Linux 2.6.33.1mtv1

• Database: MySQL 4.1.25-Debian_mt1

• HTTP Server: Apache/2.0.54

• PHP Version: 5.2.6 (Zend: 2.2.0)

• Hosting company: Media Temple
  Contributions installed:

• SEO URLs

• Cross sell

• Best sellers reloaded

• Master password

• PayPal sessions

• Google sitemaps

• Google Base

• there are some more but mostly admin tools
  Thanks very much for any help!

Fe,
When loading your site from http:// frangadesigns. com all goes well using Moxilla Firefox browser, but when I click on the log in the url stays the same.. (NO LOCK BUTTON APPEARS) If the certificate is loaded correctly it should read https:// frangadesigns. com

1. have you edited the 2 configure.php files and edited the SSL from false to true????

Hi Haredo,

Thanks for the reply.

I've had to leave the Enable SSL to 'false' because the log-in and account creation breaks when I have it set to 'true'. It tells me I have a security error if I set it to 'true'.

I'm still stuck on Step 1 of the tutorial here at the ZC site:

1. Make sure SSL is working on your account first

FIRST, make sure you've got SSL enabled on your hosting account. Work with your hosting company to get a certificate installed and to purchase one if necessary.

Can you get to "https://www.your_site.com" ? If not, ask your hosting company how to do it. If you can't access your site using an HTTPS:// address, don't try to enable SSL in Zen Cart or you'll just end up with broken pages in your store!!!My web hosting company (MT) says it's my ISP, and my ISP says it's my web hosting company.

MT support tells me that it's working on their end and sent me screenshots of the https:// working in the address bar, so I'm at a bit of a loss and waiting to hear back from them again.

So right now, I'd just like to know if anyone else besides Media Temple can load my secure URL -- https://frangadesigns.com -- so I have more to tell my hosting and ISP companies when I try to get help.

Thanks!

Oh, here is what exactly my web hosting company said about the ISP needing to update their cache:

Whenever you install an SSL certificate on a (gs) Grid-Service, it is switched from a shared IP address to a unique IP address. After this switch, it may take at least 12 hours for the new IP address to be propagated thorought the internet. This is due to the previous IP address (assigned with the .gridserver.com certificate) is cached at your ISP or upstream provider. During this time your non-secure domain will continue to resolve as normal.

I can confirm that your (gs) Grid-Service has been switched from 72.47.224.136 (shared) to 72.47.225.38 (unique) and because I have never visited your domain, I do not receive the cached version of the domain.

http://img.skitch.com/20100430-f4qbw5s47usqhkgpq9j7xwbexf.jpg

Just wanted to post an update and say that I've found (or rather, my hosting company - yay for Media Temple!) has found the root of the issue.

If anyone ever gets this bizarre problem, it was to do with my .htaccess file.

I had it set to redirect www. to no www. using some code that apparently was incomplete or incorrect according to Media Temple's knowledgebase.

Changed it from this:

RewriteCond %{HTTP_HOST} !^domain.com$ [NC]
RewriteRule ^(.*)$ http://domain.com/$1 [L,R=301]
```to this:

RewriteCond %{HTTP_HOST} ^www.domain.com$ [NC]
RewriteRule ^(.*)$ http://domain.com/$1 [L,R=301

Although it worked on my old hosting account and with a shared SSL, I guess it doesn't for my current one.

So, anyways, thanks for reading. :smile:

fepb:

I changed to this:```
RewriteCond %{HTTP_HOST} ^www.domain.com$ [NC]
RewriteRule ^(.*)$ http://domain.com/$1 [L,R=301

You might want to try this (for non-www site):```
RewriteEngine on
RewriteCond %{HTTP_HOST} !^(domain\.com)?$
RewriteRule (.*) http://domain.com/$1 [R=301,L]
```or this (for www site):```
RewriteEngine on
RewriteCond %{HTTP_HOST} !^(www\.domain\.com)?$
RewriteRule (.*) http://www.domain.com/$1 [R=301,L]

This ensures that non-canonical requests with an appended port number and/or a trailing period are correctly redirected.

The ( ) ? syntax also ensures that HTTP/1.0 requests - which have a blank HOST header - do not cause an infinite redirection loop.