Zen Cart Logo
Forums / Basic Configuration / changing admin to secure / ssl

changing admin to secure / ssl

Views: 895

Results 1 to 8 of 8
21 Jun 2012, 6:02 PM
#1
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

changing admin to secure / ssl

New install of 1.5, didn't select to make either catalog or admin secure so when I tried to install authorize.net, it balked saying admin isn't secure. So I went into the admin configure file and changed both choices to true.

So then I go back to admin - and I have tried this in three browsers - the login page is secure and when I login the admin home is still secure but all links go back to nonsecure.

I wondered if changing the configure file to make the catalog secure was necessary so I made the catalog secure as well but with no change in admin.

This is all I'm supposed do for 1.5? It doesn't seem any different than 1.3.9h in this so what could be happening?

21 Jun 2012, 6:20 PM
#2
jc8125 avatar

jc8125

Zen Follower

Join Date:
Oct 2007
Posts:
143
Plugin Contributions:
0

Re: changing admin to secure / ssl

in 1.5 to run a payment module I believe you need to use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries.. making the entire admin https

21 Jun 2012, 6:22 PM
#3
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Location:
Ohio
Posts:
62,757
Plugin Contributions:
1

Re: changing admin to secure / ssl

You just need the Admin secure to change the payment modules not the Catalog ...

21 Jun 2012, 8:49 PM
#4
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

Re: changing admin to secure / ssl

jc8125 - that was it exactly. Is this new for 1.5? Don't remember that before. Ajeh, needed to go to secure anyway for the catalog. Good to know they aren't connected in that way.

21 Jun 2012, 8:57 PM
#5
jc8125 avatar

jc8125

Zen Follower

Join Date:
Oct 2007
Posts:
143
Plugin Contributions:
0

Re: changing admin to secure / ssl

yep, pretty sure it's new for 1.5.. there's a note in the config file "suggesting" you put them both to https for security, but it doesn't quite spell it out that it's a requirement for installing payment mods. i do remember seeing it mentioned somewhere else, just can't remember where..

21 Jun 2012, 9:02 PM
#6
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

Re: changing admin to secure / ssl

gads, this is making me feel like a newbie! Thanks!

22 Jun 2012, 4:31 AM
#7
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: changing admin to secure / ssl

Yes, it's new for v1.5.0

And the other thing that's new on the storefront side is related to whether payment modules are displayed or not: if your store doesn't have ENABLE_SSL set to true (this process is the same) then any (updated) payment modules which "require" SSL to be available, will (this is what is new:) not show up during payment selection ... because you DO NOT want your store accepting credit card numbers if SSL isn't enabled.

22 Jun 2012, 1:11 PM
#8
delia avatar

delia

Totally Zenned

Join Date:
May 2006
Location:
Gardiner, Maine
Posts:
2,383
Plugin Contributions:
7

Re: changing admin to secure / ssl

That's a good idea! So, Dr. Byte, I have read thru the changes 1.5 as posted several times early on but it really hasn't prepared me for any of this. Is there more information centrally located? Or a specific thread I can contribute to as I run across new things that could be written up? I'm still not positive sure about mods - I did post a question about upgrading mods that I don't think ever got answered. When the mods are already upgraded, I steer my clients to 1.5 but it's costing me time and money to do so. In other words I want a 1.5 primer! But am also willing to write it up as I go here.