SSL Not Recognized - Authorize.net aim Module Disabled - Customer Login Loops

I have installed a SSL certificate and followed the instructions to enable it. However, when I click to install the authorize.net aim module, it still says:

For security reasons, installation of this module is disabled until your Admin is configured for SSL.

I have followed the zen cart instructions for this (here) and also re-checked my work, but something is preventing zen cart from recognizing that the SSL certificate is installed.

Additional Information:

• Zen cart v1.5.3
• I have a dedicated IP Address.
• The configure files have both been updated with the https URL as follows: https://www.mydomain.com
• https://www.mydomain.com and https://mydomain.com both work (the site can be viewed from either URL)...
• ...however, when you click a link, you will not see the https on that page. You can manually type in the https on any page and the page will show, but the https won’t automatically show on the next page when you click a link.
• the https does show automatically on the login page
• In the includes/configure.php file, “enable SSL” is set to “true”.
• When the above, required changes were made and saved, I changed the file permissions before and after making those changes.
• Browser cookies were cleared and the computer restarted.

There are two problems that are probably related:

Even with all of the above items done, zen cart is not recognizing the SSL when I go to install Authorize.net aim, and it’s telling me that installation capability for the Authorize.net aim module is disabled.

Also, when I attempt to login to the storefront as a customer OR attempt to checkout by filling in the name/address page and clicking submit to go to the shipping page, I get looped back to that page as if I had not filled it in.

I will note here that in the instructions for installing authorize.net, it says:

CURL is required and MUST be compiled into PHP with SSL support

I am not a programmer so I don’t know how to check if the above is true for this site. For whatever it’s worth, PayPal has been working fine for months on the site, if that’s an indication that the above statement is true for this site.

This is Hostgator hosting on a VPS. You can view the site at https://www.fishingfrugallures.com

I hope within this information is a clue to what could be going wrong.

Thanks for anything you can share.

I just realized that this section is for add-on payment modules not built into zen cart and my question concerns the authorize.net aim module.

Moderator, if you need to move this to a more suitable place in the forum, please let me know so I can continue to follow any responses.

Thanks

For the ADMIN configuration
Open "/admin/includes/configure.php" (and "/admin/includes/local/configure.php" if present) and verify the configured values match those noted in How do I enable SSL after I have installed Zen Cart. In particular pay attention to the information under ADMIN SECURITY NOTE.

If still not working afterwards post your "/admin/includes/configure.php" with the DIR_FS_* and DB_* entries blanked out (replace values with ---- or similiar). Make sure to include the ENABLE_SSL and all of the DIR_WS_, HTTP_, and HTTPS_* values unobscured. Please use code tags (when replying press the # in the editor to add these) around the contents of your "/admin/includes/configure.php" file. If you also have a file at "/admin/includes/local/configure.php", post the contents of the file in the same manner as the "/admin/includes/configure.php" file.

I deleted the two configuration files and uploaded my back-up copies for each file and started from scratch, paying careful attention to the area you suggested.

It worked! I was able to install the authorize.net module.

Sometimes you just need fresh eyes and a fresh start.

Thank you!

Aye, glad you were able to get authorize.net installed.

You may want to look into upgrading Zen Cart in the near future (rebuild method). There are a number of bugfixes, enhancements, and security changes in the latest version (including changes to the handling of payment modules / gateways - including Authorize.NET).

Navigated to your site's login page
I get the lock BUT when attempting to right click on it to view certificate I can not as the option is not presented
This is not normal FYI

kobra:

Navigated to your site's login page
I get the lock BUT when attempting to right click on it to view certificate I can not as the option is not presented
This is not normal FYI
Hmm, I can view the certificate via Firefox. But you did make me go look kobra (and that is a good thing)! I'd recommend the OP switch to a better hosting provider ASAP..

NOTE: PM sent to OP.

lhungil,
I am using Firefox v38.0.5
Works as designed on other sites but not on the OP's
What version are you running??

Part of the issue is that the certificate was (apparently) issued only to www.{domain.com} while the OP's configure.php file is setting the HTTP_SERVER and HTTPS_SERVER to 'http://domain.com' and 'https://domain.com', respectively.

I saw the issue that kobra spoke of when I clicked on the site's login link (https://domain.com ...) and when I changed that link in my FireFox browser bar to reference https://www.domain.com, the little lock symbol showed properly with a "Verified by GeoTrust" tag-line.

That said, the OP needs to change her two configure.php files to make sure that the HTTP{S}_SERVER settings include the www..

The certificate has both domain.com and https://www.domain.com specified in the subject alt key (so should work both ways if properly installed by the hosting provider). My suggestion is still to upgrade from "hostgator" to a better hosting provider.

I am having this same problem with Authorize.net AIM: "ALERT: For security reasons, Installation of this module is disabled until your Admin is configured for SSL."

I recently upgraded from 1.3.7 to 1.5.4. The upgrade went smoothly and everything else on the site seems to being correctly. I did not remove the Authorize.net AIM module prior to the upgrade. After the upgrade, I received the ALERT warning for the module. I have uninstalled(removed) the module, but now can not install it again.

I do have a dedicated IP and private SSL (Hostgator) all working. I have read the information here: https://www.zen-cart.com/content.php?56 . I have reviewed my configure files but I can not find the problem, so I hope someone can help.

https://jimfrenchproductions.com

Below is a copy of my admin/configure.php file

application/x-httpd-php configure.php
PHP script text

<?php /** * @package Configuration Settings circa 1.5.4 * @copyright Copyright 2003-2014 Zen Cart Development Team * @copyright Portions Copyright 2003 osCommerce * @license <http://www.zen-cart.com/license/2_0.txt> GNU Public License V2.0 * File Built by zc_install on 2015-01-11 11:14:48 */ /*************** NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. ***********/ /*************** The 2 files should be kept separate and not used to overwrite each other. ***********/ /** * WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN: * To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries: */ define('HTTP_SERVER', 'http://jimfrenchproductions.com'); define('HTTPS_SERVER', 'https://jimfrenchproductions.com'); define('HTTP_CATALOG_SERVER', 'http://jimfrenchproductions.com'); define('HTTPS_CATALOG_SERVER', 'https://jimfrenchproductions.com'); // secure webserver for admin? Valid choices are 'true' or 'false' (including quotes). define('ENABLE_SSL_ADMIN', 'true'); // secure webserver for storefront? Valid choices are 'true' or 'false' (including quotes). define('ENABLE_SSL_CATALOG', 'true'); ... (extra content removed)

Picci:

/**

• WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN:
• To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries:
  */
  define('HTTP_SERVER', 'http://jimfrenchproductions.com');
  define('HTTPS_SERVER', 'https://jimfrenchproductions.com');
  define('HTTP_CATALOG_SERVER', 'http://jimfrenchproductions.com');
  define('HTTPS_CATALOG_SERVER', 'https://jimfrenchproductions.com');

// secure webserver for admin? Valid choices are 'true' or 'false' (including quotes).
define('ENABLE_SSL_ADMIN', 'true');

// secure webserver for storefront? Valid choices are 'true' or 'false' (including quotes).
define('ENABLE_SSL_CATALOG', 'true');
In your admin/includes/configure.php
You need to also set php define('HTTP_SERVER', 'http://jimfrenchproductions.com'); to```php
define('HTTP_SERVER', 'https://jimfrenchproductions.com');

Thank you very much for spotting this for me! That fixed the issue.

Apparently, I did not read and understand the Admin Security Note section on this page. https://www.zen-cart.com/content.php?56

I am loving the upgraded Zen Cart site with the Tableau template, it looks great on mobile.