What Does "Checkout" Actually Consist Of?

Hello,

I installed my SSL successfully, and changed the configure.php file with the appropriate changes:

  // Define the webserver and path parameters
  // HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
  // HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
  define('HTTP_SERVER', 'http://knowpedev.petrinidressings.com');
  define('HTTPS_SERVER', 'https://knowpedev.petrinidressings.com');

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

I'm not accepting any credit cards or payments on my site, instead, I'm using PayPal IPN. However, I was expecting my pages that consisted of a user logging in or entering personal information, like change of address, new user account creation, etc. to be secured, but I'm not seeing a lock, and I'm not seeing the protocol switch to https. I especially want to make sure that the last phase of checkout, the transmission of the customer data to PayPal, is secure. Is there anything else I need to do to ensure this? Was I expecting something different from how Zen Cart actually works?

Thanks!

Kevin

Tripple check that your CA Bundle was issued to knowpedev.petrinidressings.com and not https://www.knowpedev.petrinidressings.com.

If installed correctly, Zen Cart will auto switch to the https:// secure session on login.

If you tried using the mod_SSL in cPanel this is faulty and most probably your cert is not installed correctly - talk to your host provider.

Thanks Kobra,

I'm gonna try and move my site live right now. The cert. was issued for https://www.petrinidressings.com, but I've been developing on knowpedev.petrinidressings.com, so I'm not sure if that's affecting it. However, I at least expected to see the cart attempt to switch to https?

Am I correct in thinking that customer login, address changes, and transmisison to paypal should all be done securely?

All handling of customer data should be done securely.
Zen Cart does this automatically if you have SSL properly enabled on your site, by using your site's SSL resources.