SSL from GoDaddy

I searched the forum and found some advice on it and some code. But apparently the code is already in v1.3.0 so....

Does anyone else have a turbo SSL from GoDaddy? I know I need to talk to my host about installing it. I am on chat with them now. But I wanted to know, are there any changes to things/code I need to do to make the ssl work with cart? Is it automatic?

TIA

It's automatic. SSL encrypt the data transmittion layer between computers, it doesn't matter what you're transfering on that layer. All you have to do is install it and allocate a unique ip, then just type in https and if you get the padlock without popup then you're all ready to go. :thumbsup:

well I can type in the https:// but I thought the whole point of having the SSL was so that when people surfed to my site and shopped the whole thing would be secure? Right now just the first page shows up as https:// and only if you type it. It still shows up as http:// too.

I am new, as you can tell so maybe I'm confused about what SSL actually does. Like how will the customers know I have an ssl secured site if they don't type in the https://. I know I never think to type that. KWIM?

Shopping doesn't need to be secure, only the checkout portion where they actually enter the credit card and other information need to be. If you go to the checkout section then Zencard does switch to https automatically. Your customer will see a whole padlock if SSL have been implemented correctly for a particular page. If there are some elements that isn't transfered by SSL then you will see a broken padlock and a warning will come out.

SSL is a connection layer, whenever you type in https: the connection request goes to the server and request a secure connection. Once the connection have been established then anything sent over will be encryped based on the highest security setting that can be use between the two.

SSL is based on a public key encryption system. You generated 2 keys when you request an SSL certificate. The private key which you keep can decrypt anything by the public key and vice versa. When an SSL connection is establish your server send out the public key to the requesting browser so that they can use it to decrypt anything encrypted on the server by your private key. The browser then uses the public key to encrypt data it sent to the server that only the private key your possess can decrypt.

SSL is the mechanism through which negotiation and transferance of the public key occur behind the scene.

oh okay!

Hey was I supposed to go in and change the SSL option to enabled or 'yes' or what not?

When I initially set up the cart I didn't have an ssl cert. So I left both questions as "No"

Yes, I don't think there's a db key, so just changing the config files should work. :yes:

Okay next question.

Which configure files and where are they? I really have no idea what I'm looking at when I open any of the php files so I don't want to mistake something somewhere and change some random thing.

There's only 2

/includes/configure.php and /admin/includes/configure

Around the top, there should be a couple of settings, one with a url for normal, one with a url for https, and one that say if you want SSL and that should be true.

okay! I got it right (which files I mean). I have to wait until actual laptop is free to do testing. Hypothetically speaking would not having those things changed be the cause of my problem?

You can always do a re-install :) That'll get ya familiar with Zen Cart more as well. I probably did about 15 or 20 reinstalls before I got what I wanted. :laugh:

Yes, prior to having an ssl certificate the option to use ssl was disabled. Now that you have ssl and you have enabled the use of ssl in those two files the important sections of your website should now show a padlock in the bottom browser bar. Go to Login and see if you get the padlock, and if you don't then post back here.

Vger

ladysaat:

okay! I got it right (which files I mean). I have to wait until actual laptop is free to do testing. Hypothetically speaking would not having those things changed be the cause of my problem?

Might want to do a search for godaddy - they have a quirky set up and you should find the changes in the archives.

FluffyTigger:

You can always do a re-install :) That'll get ya familiar with Zen Cart more as well. I probably did about 15 or 20 reinstalls before I got what I wanted. :laugh:

LOL! Right now I am trying to dance around that flame. So far everything is kosher. One small exception with linkpoint but the weirdness with the SSL and the cart behavior is fixed.

Kim - my host company did have problems with that cert. They put it in and had to put it in weird to get it to cover what was necessary. Some stuff had to be undone by DrByte to get the cart to stop acting deaf. Now I have a copy of everything as it is now so I can revert to that when I make my next dumb move.

Godaddy SSL require the intermediate certificate installed to play nice. I've heard of colleagues having the same problem on cpanel with the installation. On my Plesk Server the SSL installed fine if I add in the intermediate certificate.

The good news is you're getting a lot of experience with Zen Cart, which is always good :laugh:

If I remember correctly, when you purchase a certificate, it has to be "installed" somewhere. When you obtain a certificate (file), where should it be installed/ reside in the zencart file structure?

Also, if we are hosting the site ourselves, where do you recommend that you go to get a certificate.