SSL set up - there are 3 varaibles not 100% sure which I need

OK so setting up SSL on my server and I would like admin covered by SSL and also the checkout process - now I seem to have 3 locations to play with within configure and not sure on the 3rd one..

admin/includes/configure.php

// secure webserver for admin?  Valid choices are 'true' or 'false' (including quotes).
  define('ENABLE_SSL_ADMIN', 'true');

  // secure webserver for storefront?  Valid choices are 'true' or 'false' (including quotes).
  define('ENABLE_SSL_CATALOG', 'true');

What does the 2nd one means the WHOLE catalog or just checkout section, because I then have:

includes/configure.php

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

so its just the 2nd one that I am unsure what its there for needed etc?

Thanks
Sarah

SarahL:

OK so setting up SSL on my server and I would like admin covered by SSL and also the checkout process - now I seem to have 3 locations to play with within configure and not sure on the 3rd one..

admin/includes/configure.php

// secure webserver for admin? Valid choices are 'true' or 'false' (including quotes).
define('ENABLE_SSL_ADMIN', 'true');

// secure webserver for storefront? Valid choices are 'true' or 'false' (including quotes).
define('ENABLE_SSL_CATALOG', 'true');

> 
> What does the 2nd one means the WHOLE catalog or just checkout section, because I then have:
> 
> includes/configure.php
> ```
  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

so its just the 2nd one that I am unsure what its there for needed etc?

Thanks
Sarah

The configure.php files are independent for the side of the store being accessed. The SSL settings of the includes/configure.php file affect how visitors to the store interact and have no affect on how the admin section accesses the store data. The SSL settings in the admin do not affect how customers to the store navigate/use the store. This second file (having two SSL settings) has two options because of the way/location of accessing/transmitting the data.

If the settings are as described, and there is still an issue, more information is needed. Please see the posting tips.

mc thank you but it didn't really answer my question - if I would like SSL on checkout only do I need to have the SSL as TRUE in that 2nd statement in admin/config - there is no issue or problem so I cannot post any - it was more an installation question - as to what does that one apply too - does it matter what its set to?

if I would like SSL on checkout only
Then only set true in your includes/configure.php file
It will also switch for login on the frontend

thanks I will give that a whirl then and leave that 2nd declaration to false and see what that does - picky but would be nice to know what that 2nd one is all about :)

SarahL:

thanks I will give that a whirl then and leave that 2nd declaration to false and see what that does - picky but would be nice to know what that 2nd one is all about :)

Primarily it is about how the admin side accesses webpages on the store side. For example if product is to remain offered only through secure data transfer, then would want on the admin side for the admin to also access the store data/pages using SSL just like on the store front.

Mind you I was thinking it had more to do with customer data as well, but looking through various FAQs:
https://www.zen-cart.com/content.php?332-do-I-need-SSL-on-my-store-website

referenced by the above:
https://www.zen-cart.com/content.php?56-how-do-i-enable-ssl-after-i-have-installed-zen-cart

https://www.zen-cart.com/content.php?307-configurephp-file-contents-explained

etc...

Found by clicking the FAQ search button in the upper right and typing in the search field: SSL certificate

The other side of it is, why not activate SSL on the admin side when a SSL was provided/obtained? Considering one of the goals is to increase the security of data transfer, what would be a reason to not enable it?

thanks MC - again yes I read all of those but none of them - that I could see - reference that 3rd option so I was unsure what it was talking about and how relevant it was to me

Oh SSL in admin is turned on - I was correct in what I said "I only wanted SSL for checkout" because I thought that the admin/config file was asking about the WHOLE site SSL wise rather than the checkout process only :D so 100% SSL on admin yes quite agree

thanks does help - I just like to know what they all are and after 12+ years with ZC realised that i didn't :)

SarahL:

thanks does help - I just like to know what they all are and after 12+ years with ZC realised that i didn't :)

Unfortunately, unlikely to ever "know it all". :) Even the core team counts on each other for making/keeping this as good as it is with the support of all the other open source testers/users.

On a side note, activating the SSL is not the only attribute necessary, but also to ensure that the applicable HTTPS_ related fields in the applicable configure.php file include https: this may not be necessary for you to know in your case, but would likely help future readers. :)

yes I also need to check that out myself too - the rest of config files :) when I get to testing it out and making sure it all works!

As for knowing it all - lol never a chance of that!! I swear I only use about 50% of the store capabilities! but its still the one that I know I rarely say "no you cannot do that" when using it :D