Site maintenance: Sun 15 Nov, from 12:00 UTC, about 4–6 hours. Details

This cutover relies on some testing that is still incomplete so may be cancelled at short notice

Forums / General Questions / SSL works only in top pages in Admin

SSL works only in top pages in Admin

Started by suzithepid on 16 Apr 2015, 5:11 PM · Views: 2,012

Results 1 to 6 of 6
16 Apr 2015, 5:11 PM
#1
suzithepid avatar

suzithepid

New Zenner

Join Date:
Sep 2010
Location:
Massillon, OH
Posts:
12
Plugin Contributions:
0

SSL works only in top pages in Admin

I have enabled the SSL in my store by updating the admin and main config files to 'true'. I also enabled catalog SSL. When I log into the admin section I log into a secure site:

https://www.xxxxxxx.com/store/xxxadmin/modules.php?set=payment

But when I go to subsequent pages, for example installing the Linkpoint API, it drops the security:

http://www.xxxxxxx.com/store/xxxadmin/modules.php?set=payment&module=linkpoint_api

I have cleared cookies and cache for the past 2 days, and tried in Chrome and Firefox.

Any suggestions?

16 Apr 2015, 6:51 PM
#2
suzithepid avatar

suzithepid

New Zenner

Join Date:
Sep 2010
Location:
Massillon, OH
Posts:
12
Plugin Contributions:
0

Re: SSL works only in top pages in Admin

suzithepid:

I have enabled the SSL in my store by updating the admin and main config files to 'true'. I also enabled catalog SSL. When I log into the admin section I log into a secure site:

https://www.xxxxxxx.com/store/xxxadmin/modules.php?set=payment

But when I go to subsequent pages, for example installing the Linkpoint API, it drops the security:

http://www.xxxxxxx.com/store/xxxadmin/modules.php?set=payment&module=linkpoint_api

I have cleared cookies and cache for the past 2 days, and tried in Chrome and Firefox.

Any suggestions?

Urgent...I cannot set up the Linkpoint api without the ssl working on that page!

16 Apr 2015, 7:02 PM
#3
suzithepid avatar

suzithepid

New Zenner

Join Date:
Sep 2010
Location:
Massillon, OH
Posts:
12
Plugin Contributions:
0

Re: SSL works only in top pages in Admin

When I set it up like this:

**

  • WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN:
  • To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries:
    */
    define('HTTP_SERVER', 'https://www.xxxxxxxxx.com');
    define('HTTPS_SERVER', 'https://www.xxxxxxxxx.com');
    define('HTTP_CATALOG_SERVER', 'http://www.xxxxxxxxx.com');
    define('HTTPS_CATALOG_SERVER', 'https://www.xxxxxxxxx.com');

// secure webserver for admin? Valid choices are 'true' or 'false' (including quotes).
define('ENABLE_SSL_ADMIN', 'true');

// secure webserver for storefront? Valid choices are 'true' or 'false' (including quotes).
define('ENABLE_SSL_CATALOG', 'false');

I get into an endless loop that makes it so I cannot log in. I keep entering my login and it takes me back to the login page. Removing the https from the HTTP_SERVER fixes that.

18 Apr 2015, 5:47 PM
#5
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,511
Plugin Contributions:
176

Re: SSL works only in top pages in Admin

suzithepid:

When I set it up like this I get into an endless loop that makes it so I cannot log in. I keep entering my login and it takes me back to the login page. Removing the https from the HTTP_SERVER fixes that.

**

  • WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN:
  • To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries:
    */
    define('HTTP_SERVER', 'https://www.xxxxxxxxx.com');
    define('HTTPS_SERVER', 'https://www.xxxxxxxxx.com');

// secure webserver for admin? Valid choices are 'true' or 'false' (including quotes).
define('ENABLE_SSL_ADMIN', 'true');
You could probably set define('ENABLE_SSL_ADMIN', 'true'); to 'false' instead, and that would stop the need for any redirects.
But, if merely using SSL is causing redirects, then it's quite possible something is misconfigured in your server's apache vhost where SSL settings are set.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

18 Apr 2015, 7:37 PM
#6
suzithepid avatar

suzithepid

New Zenner

Join Date:
Sep 2010
Location:
Massillon, OH
Posts:
12
Plugin Contributions:
0

Re: SSL works only in top pages in Admin

DrByte:

You could probably set define('ENABLE_SSL_ADMIN', 'true'); to 'false' instead, and that would stop the need for any redirects.
But, if merely using SSL is causing redirects, then it's quite possible something is misconfigured in your server's apache vhost where SSL settings are set.

The problem was not the store, but the server. The main information section of the server said I had the latest version of PHP istalled. But, upon further scrutiny, I found by looking at the server information it was 5.2. When I called the host company they balked at first, but eventually admitted their mistake, updated the PHP and the site works fine.

Thank you for your assistance.