Zen Cart Logo
Forums / General Questions / SSL on Globally

SSL on Globally

Locked

Views: 1,647

Results 1 to 12 of 12
This thread is locked. New replies are disabled.
29 Mar 2007, 8:30 PM
#1
autotooth avatar

autotooth

New Zenner

Join Date:
Mar 2007
Posts:
5
Plugin Contributions:
0

SSL on Globally

I have an odd problem SSL is on and working, a bit too well. The entire site is only accessable through https. So the normal switching that zen-cart does isn't working like it should. I've been beating my brains out trying to figure this one out. I've built five of these sites now and this is the first time I've encountered this problem. I've read and re-read everything here on SSL. The site I'm working on is configured properly. Both config.php files have the proper url's and SSL is turned on (true) in the proper places. The SSL is definately workng. Anyone encounter this phnomenon before? Any suggestions? The host I use doesn't need two folders for secure and nonsecure, none of my other sites are setup like that.
Thanks.

29 Mar 2007, 8:36 PM
#2
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: SSL on Globally

past the top 30 or so lines from your includes/configure.php file if you would

29 Mar 2007, 8:48 PM
#3
autotooth avatar

autotooth

New Zenner

Join Date:
Mar 2007
Posts:
5
Plugin Contributions:
0

Re: SSL on Globally

Here you go, but if this is the problem it doesn't look like it's the usual define 'HTTP_SERVER' stuff.

Thanks

define('HTTP_SERVER', 'http://www.beconmedical.com');
define('HTTPS_SERVER', 'https://www.beconmedical.com');
define('HTTP_CATALOG_SERVER', 'http://www.beconmedical.com');
define('HTTPS_CATALOG_SERVER', 'https://www.beconmedical.com');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_ADMIN', '/admin/');
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_ADMIN', '/admin/');
define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_CATALOG_IMAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'images/');
define('DIR_WS_CATALOG_TEMPLATE', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/templates/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_CATALOG_LANGUAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/languages/');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_ADMIN', '/home/autotooth/beconmedical.com/admin/');
define('DIR_FS_CATALOG', '/home/autotooth/beconmedical.com/');

define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
define('DIR_FS_CATALOG_TEMPLATES', DIR_FS_CATALOG . 'includes/templates/');
define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');
define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');
define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

// define our database connection
define('DB_TYPE', 'mysql');
define('DB_PREFIX', '');
define('DB_SERVER', 'mysql.beconmedical.com');
define('DB_SERVER_USERNAME', XXXXXX;
define('DB_SERVER_PASSWORD', 'XXXXXXX);
define('DB_DATABASE', 'XXXXXXX');
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage

// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'none');
define('DIR_FS_SQL_CACHE', '/home/autotooth/beconmedical.com/cache');

and

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
define('HTTP_SERVER', 'http://www.beconmedical.com');
define('HTTPS_SERVER', 'https://www.beconmedical.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

define('DIR_WS_PHPBB', '/');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_CATALOG', '/home/autotooth/beconmedical.com/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');

// define our database connection
define('DB_TYPE', 'mysql');
define('DB_PREFIX', '');
define('DB_SERVER', 'mysql.beconmedical.com');
define('DB_SERVER_USERNAME', 'XXXXXX');
define('DB_SERVER_PASSWORD', 'XXXXXX');
define('DB_DATABASE', 'XXXXXX');
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage

// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'none');
define('DIR_FS_SQL_CACHE', '/home/autotooth/beconmedical.com/cache');

30 Mar 2007, 3:58 PM
#4
autotooth avatar

autotooth

New Zenner

Join Date:
Mar 2007
Posts:
5
Plugin Contributions:
0

Re: SSL on Globally

Problem was not in the configuration file as it turned out the server was improperly configured the problem was resolved.
thanks.

30 Mar 2007, 9:34 PM
#5
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: SSL on Globally

These should be set to false...

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');
31 Mar 2007, 4:37 PM
#6
autotooth avatar

autotooth

New Zenner

Join Date:
Mar 2007
Posts:
5
Plugin Contributions:
0

Re: SSL on Globally

Why, what are the pros and con's of turning security off on these two?
I'm not trying to be a jerk I just would like better understanding.
thanks

31 Mar 2007, 4:38 PM
#7
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: SSL on Globally

you got it squared away,
your good

31 Mar 2007, 5:51 PM
#8
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: SSL on Globally

Why, what are the pros and con's of turning security off on these two?
These are for running the catalog and the admin, respectively, in SSL mode. This requires that all exchanges be encrypted and this takes time and/or slows access down a bit.

Shopping and configuring in the admin, normally does not involve particuarly sensitive information exchanges nor a need for either of these processes to be run in the SSL mode. JMO

By setting in the configure file in /includes:

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

Zen Cart will switch to SSL mode only for the exchanges of sensitive information - like login and CC information

31 Mar 2007, 6:19 PM
#9
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: SSL on Globally

define('ENABLE_SSL_CATALOG', 'true');does not force catalog side to be all ssl

31 Mar 2007, 7:15 PM
#10
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: SSL on Globally

does not force catalog side to be all ssl

Only admin catalog accesses??

1 Apr 2007, 10:17 PM
#11
autotooth avatar

autotooth

New Zenner

Join Date:
Mar 2007
Posts:
5
Plugin Contributions:
0

Re: SSL on Globally

I thought the Setting the Admin area to SSL only had an impact on the login page not the whole admin area. Likewise when I have the Catalog SSL turned on I don't see the lock when I'm browsing the catalog or adding to the shopping cart. In-fact I'm not sure which areas are affected by this variable. Should I be seeing encryption on these pages, perhaps there is a problem.

1 Apr 2007, 10:43 PM
#12
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: SSL on Globally

on catalog side you will ONLY see the SSL on login, account history and checkout pages

in admin its ONLY the login