SSL not set up right

Hi, I am having a problem setting up the secure part of my site, I hope someone can help!

The site is http://www.longtronics.co.uk
The secure site is https://secure.longtronics.co.uk

When you click on the "Log In" link, it shows the old "this page contains secure and non secure items" box (in IE) or an icon in the address bar (with no yellow bar) in Firefox.

There are no "src="http" links that I can see, all links and images are hard-coded. Having compared it to other secure sites, I am thinking it may be the css file that is causing the problem, but again I can't find any links!

Any help would be greatly appreciated!

Who is your hosting company?

My hosting company is servage.net - I also got the SSL certificate through them.

The problem is the Domain name used for the Cert.

Your Domain: http://www.longtronics.co.uk/

Cert Domain: https://secure.longtronics.co.uk/

Because your Zen Cart is setup to use "www.longtronics.co.uk" and that's where all the page links point to, the Cert is showing/telling you that the information is unauthorized -- it comes from another Domain name.

What you need to do is have your Cert reissued to 'www.longtronics.co.uk".

Thanks, I'll try that and let you know if it works!

I've just heard back from my hosting company - they say it is not possible to change the certificate! Is there any way around this?!

I have tried changing the location of the secure directory from /www (root) to /www/secure and copying all the files to this directory, but still the same problem.

I'm not sure why your Cert was issued to "secure.longtronics.co.uk" but if any money changed hands, it could be money down the drain. Odds are you will need to purchase a new Cert with the correct Domain name.

I was under the impression that zen cart can be set up to work with any SSL space (even a shared space) or am I wrong?! Could I get around this by directing all traffic to the secure site, or would that just slow it down too much?

vinyardo:

I was under the impression that zen cart can be set up to work with any SSL space (even a shared space)Yes, in most cases it can.
However, if the SSL is handled by a different server than the non-SSL processing, you will likely have problems.
If they are on the same physical server, there is usually not a problem unless the server's configuration is odd.

You must set the proper URLs and paths in your configure.php files for it to work.

If I check the DNS for your site, https://www.longtronics.co.uk and secure.longtronics.co.uk have completely different IP addresses, which suggests they are different locations. Either you need to have the Zen Cart code in both locations, or the DNS needs to be changed so that both urls point to the same IP address.

Thanks for your advice on this, I think I have it working now (although not quite how it should be!) - I have run the install on the secure area as well as the normal area, and copied the files over. Now, when you browse the site it is not secure, but as soon as you click "login" or "register", the site becomes secure for the rest of the session. It's not ideal, but it works! :blink:

Thanks again for your help.

Where I come from, that's exactly how it is supposed to work.

Remember that any changes you make in one area, new add-ons or Mod installs, you will have to duplicate in the other area. Both secure & non-secure need to be using the same setup.