Make entire site SSL Only

tbohannon:

frank18,

Thanks for re-confirming the changes I made to clear the 2 issues I originally posted about.
I set all http references to https as you suggested.

So my remaining issue now is you say I can remove the Force SSL .htaccess rules, but when I do remove the rules
store level is no longer protected, only when checking out.

By saying that the store level is not protected do you mean that if someone clicks on a link (any link) of the page on which they first land that the page is not https, then there is a problem. Ie. If one enters 'http://www.bodhisattva-store.com' then clicks on a link (for discussion a product link), to what prefix of an address is one taken? http:? Or as expected https:?

Next, what is this protection that you are concerned about? Is there somethng about the content of your website that should not be available to other people? If the concern at this level is the content entered by the customers, well they would have to purposefully choose to enter an address as http: after the first page in order for it to be served as http:. In addition, when SSL is active ZC already forces necessary pages to be served as https...

Anyways, thing is what is it that is "needing" protection?

I just clicked the second link in post #6 and went straight to https:// ..... you need to clear your browser cache.

Sorry for illiterate question.

I have now Zen Cart 1.5.1 and would like to add SSL.

I was offered GlobalSign AlphaSSL Certificate.

Is it as simple as Installing SSL or there is a need to tweak Zen Cart installation, because it will stop working?

Thank you.

I guess there is an answer here:

https://www.zen-cart.com/content.php?56-how-do-i-enable-ssl-after-i-have-installed-zen-cart

idtags:

I guess there is an answer here:

https://www.zen-cart.com/content.php?56-how-do-i-enable-ssl-after-i-have-installed-zen-cart

There is that, but may I suggest that before you make the changes identified in that FAQ that you verify that the SSL certificate is properly installed? To do this, simply select any page on your site (even your home page) and try to access it with https: if that is successful without error then proceed with the above actions to change the ZC setup.

mc12345678:

There is that, but may I suggest that before you make the changes identified in that FAQ that you verify that the SSL certificate is properly installed? To do this, simply select any page on your site (even your home page) and try to access it with https: if that is successful without error then proceed with the above actions to change the ZC setup.

Thank you for suggestion.
I will take definitely note of it.