SSL Issue/Problem

Hi Folks

I wonder if someone would be as kind as to look at an issue I have with my site.

I have recently had an SSL cert (Rapidssl) installed by my host and enabled the SSL via the configure.php files as described in the tutorials.

I am now getting a warning when visiting pages on IE not so much on Firefox but noticable on IE so I suspect all browsers are affected.

I have gone through various image src and renamed them with relative(I think) paths as opposed to absolute but am still getting a problem.

Just wondered if there is something glaringly wrong with the site or something obvious I have missed, I have searched but am honestly confused by some of the terms and as such don't want to start messing with things I am unsure of!

I have the latest version of zencart installed (was a fresh install) and the following addons.
Image Handler 2
CSS/JS Loader

Using all_business template.

w w w . a s - i r e l a n d . c o m

Any help with this would be great!

Cheers

Derek

Errors on Secure pages are caused by linking to non-secure pages. If you have any scripts or images on the secure page which start with http instead of https, you will get a popup error in IE. You will also get the error in FF, but FF doesn't usually display popup but rather a broken lock in the bottom navigation bar.

There are tons of links on your login page that are linking to non-secure pages.

Thanks for the reply, so are you saying that I can't link to a non https external link on one of my secure pages then?

I didn't think external links had an effect on this though from what I have read on here, but then I am known to read things incorrectly!

When you switch to https pages your 'base href' should change to https, but yours remains as: <base href="http://www.as-ireland.com/" /> - and that's why you have this problem.

You need to recheck your includes/configure.php file

Vger

Vger:

When you switch to https pages your 'base href' should change to https, but yours remains as: <base href="http://www.as-ireland.com/" /> - and that's why you have this problem.

You need to recheck your includes/configure.php file

Vger

Just checked and rechecked both configure files point correctly to the https version and are all enabled 'true'

Is there another reason why the 'base href' would be incorrect?

Cheers

Derek

My guess would be that the template you are using has some hardcoding of links within it. I suggest you try switching to the Classic Template and see if that resolves the problem. If it does then you know that it's the template you've been using which is at fault.

Having http links, internal or external, on https pages does not cause a problem - it's only when you call in either images or javascript froman http location on https pages which causes these problems - and I couldn't see any of those.

Vger

Damn switching to original template hasn't cured either!

Any other things to check for vger?

Derek

Okay, upon further examination, all of your images are being called in from http locations:

http://www.as-ireland.com/includes/templates/all_business/images/bk.jpg
http://www.as-ireland.com/includes/templates/all_business/images/cart.jpg
http://www.as-ireland.com/includes/templates/all_business/images/ASIRLLOGO1.jpg
http://www.as-ireland.com/includes/templates/all_business/images/top-menu-bk.jpg
http://www.as-ireland.com/includes/templates/all_business/images/bc_cat_no_sub.gif
http://www.as-ireland.com/includes/templates/all_business/images/bc_cat_pointer_right.gif
http://www.as-ireland.com/includes/templates/all_business/images/bc_cat_boxes.gif
http://www.as-ireland.com/includes/templates/all_business/buttons/english/button_login.gif
http://www.as-ireland.com/includes/templates/all_business/buttons/english/button_submit.gif
http://www.as-ireland.com/images/visabanner.gif
http://www.as-ireland.com/images/twitter.png
http://www.as-ireland.com/images/facebook.png

but I believe that this is because your base href is wrong.

Check any root level .htaccess file to make sure that people are not being redirected to http addresses.

Vger

Back again.

Thanks for taking the time to look over the site, I have just spent last couple of hours checking all the .htaccess files I can find and I'll be honest I cannot see anything relating to http or https etc.

I'm sorry to sound a touch dense but is there anything else I can do to find what I should be looking for...?

What determines where the image locations are from as I again am having trouble even finding them, (all I can find for instance is the "../images/filenamehere") just so I can change them manually and see if that helps.

I don't want to turn the ssl off but with its current issues every man and his dog are ringing me instead!!

Derek

1. There's nothing wrong with the SSL Cert install
2. The images do appear to be using relative pathways, as they should be, and only show up as coming from an http:// location because the base href is wrong.
3. Just checked the site in iE 8, which gives more of a clue with this sort of problem that Firefox - and it's definitely the base href that's the problem.

Vger

After a bit more searching I came across a thread which linked to running this test below, is it of any relevance as it means very little to me!

Protocol detected: NONSSL

Array
(
[DOCUMENT_ROOT] => /home/mounts/home/a/as-ireland/web/
[GATEWAY_INTERFACE] => CGI/1.1
[HTTP_ACCEPT] => text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
[HTTP_ACCEPT_CHARSET] => ISO-8859-1,utf-8;q=0.7,*;q=0.7
[HTTP_ACCEPT_ENCODING] => gzip, deflate
[HTTP_ACCEPT_LANGUAGE] => en-gb,en;q=0.5
[HTTP_CONNECTION] => keep-alive
[HTTP_COOKIE] => zenid=4keefl0s29ive0jlfermopold7
[HTTP_HOST] => https://www.as-ireland.com
[HTTP_KEEP_ALIVE] => 115
[HTTP_USER_AGENT] => Mozilla/5.0 (Windows NT 5.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
[HTTP_X_FORWARDED_FOR] => 86.42.4.159
[PATH] => /bin
[QUERY_STRING] =>
[REDIRECT_STATUS] => 200
[REMOTE_ADDR] => 192.168.0.1
[REMOTE_PORT] => 53967
[REQUEST_METHOD] => GET
[REQUEST_URI] => /ssltest.php
[SCRIPT_FILENAME] => /home/mounts/home/a/as-ireland/web/ssltest.php
[SCRIPT_NAME] => /ssltest.php
[SERVER_ADDR] => 192.168.0.5
[SERVER_ADMIN] => [email protected]
[SERVER_NAME] => https://www.as-ireland.com
[SERVER_PORT] => 80
[SERVER_PROTOCOL] => HTTP/1.1
[SERVER_SIGNATURE] =>
Apache/2.2.14 (Ubuntu) Server at https://www.as-ireland.com Port 80

[SERVER_SOFTWARE] => Apache/2.2.14 (Ubuntu)
[PHP_SELF] => /ssltest.php
[REQUEST_TIME] => 1305448700

Ok I have just set it so the site is https throughout, I know this is not really a fix but at least the site is working without errors.

Is there a downside to a site being encrypted sitewide?

Cheers

Derek

Is there a downside to a site being encrypted sitewide?

1. Encrypted pages take slightly longer to deliver onto the visitors PC.
2. https pages will get listed in search engine results, but https pages do not get "Page Rank" from Google.

You should contact your hosting company about this. It does not appear to be a problem wth the site, or with the SSL Certificate. It does seem that some kind of redirect is taking place, and this may be a hosting issue.

Vger

hi friends i am Raj, i have my site on zencart version 1.3.9,i am using the apparel boutique template,i have a private SSL Certificate the problem is that only the home page shows with https without errors and all other pages show errors,can any one help me resolve this isssue. my site url is https://www.eshopie.com :clap:

Well, first off, you have your website's configure.php files set up incorrectly. You have your entire site set to operate under SSL, which is not advisable:

1. SSL pages take longer to deliver, because of the encryption.
2. Whilst your site will get listed in search engines it won't get any Google Page Rank, because Page Rank does not apply to https pages.

As to the reason why you get an insecure padlock on https pages it's because of this javascript code being called in from an outside source on an http address:

<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=xa-4cd1ec2b08cdcb12"></script>

Vger

Thanks Vger,i have changed the code and its working correctly,u r right and i will disable the SSL for the unnecessary pages,again thanks a lot

Hi guys,

I also have a problem with SSL integration. I'm using 1.3.9h (the latest). My SSL certificates are were setup and the SSL vendors tester said it was working correctly. When I tried to edit the includes/configure.php file in Cpanel it says that it's saved but gives an error: [a fatal error or timeout occurred while processing this directive]. Also, my admin/includes/configure.php is MISSING!?

My site works fine though but I obviously can't setup Zencart for SSL.

I'm using the pure_blue template and have the CSS click-show-hide menu and Easy Populate installed. Help please?
my URL: https://www.electricantcomputers.co.za
:wacko:

Michaeldnr:

When I tried to edit the includes/configure.php file in Cpanel it says that it's saved but gives an error: [a fatal error or timeout occurred while processing this directive].
Check in cpanel the permissions on the file and if 444 set to 644 first
But one should NOT be editing any php files using the cpanel editors
Michaeldnr:

Also, my admin/includes/configure.php is MISSING!?
Better check again as if you can access your admin there is one

The error message you are getting is a definite indicator that you did not change the permissions on that file to 644 before trying to use the "Edit" function in cPanel's File Manager.

Vger

Thanks guys,

Will try that and get back to you.
I know, I can access my admin are so maybe I'm just looking in the wrong place...